in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.
openharmony openharmony 4.0
openharmony openharmony