OpenHarmony Out-of-Bounds Write Vulnerability in Arkcompiler ETS Runtime Allowing Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in OpenHarmony versions through 5.0.2. This issue arises from an out-of-bounds write in the arkcompiler_ets_runtime component, which can be exploited by local attackers in certain restricted scenarios, particularly within pre-installed applications.

Impact

Exploitation of this vulnerability could lead to unauthorized arbitrary code execution within the context of the affected application.

Remediation

Users can apply the available security patch by merging the pull request labeled '5.0.2.x' into their OpenHarmony 5.0.2 release branch.