OpenHarmony Arbitrary Code Execution Vulnerability

A vulnerability in OpenHarmony versions 6.0 and prior allows local attackers to execute arbitrary code. This issue is classified as a use-after-free vulnerability in the filemanagement_storage_service component, specifically in the OpenHarmony-v5.1.0-Release branch.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code, potentially allowing an attacker to execute malicious payloads or commands on the affected system.

Remediation

Users can apply the patch available in the OpenHarmony filemanagement_storage_service repository, specifically in the pull request linked in the references.