Openharmony CVEs and Security Vulnerabilities

CVE-2025-25212

pasteboard has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-25278

liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-26690

communication dsoftbus has a NULL pointer vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27128

liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27536

arkcompiler_ets_runtime has a type confusion vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27562

communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27577

liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-20626

Arkcompiler Ets Runtime has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-21098

Liteos-A has an insecure storage of sensitive information vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22847

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-23234

Arkcompiler Ets Runtime has a buffer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-20011

Communication Dsoftbus has a memory leak vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-20091

Communication Dsoftbus has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-21089

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22443

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22837

Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22841

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22897

Arkcompiler Ets Runtime has a buffer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-23240

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-23409

Communication Dsoftbus has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

Search vulnerabilities

pasteboard has an improper input vulnerability

liteos_a has a race condition vulnerability

communication dsoftbus has a NULL pointer vulnerability

liteos_a has an UAF vulnerability

arkcompiler_ets_runtime has a type confusion vulnerability

communication_dsoftbus has a missing release of memory vulnerability

liteos_a has a race condition vulnerability

Arkcompiler Ets Runtime has an UAF vulnerability

Liteos-A has an insecure storage of sensitive information vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has a buffer overflow vulnerability

Communication Dsoftbus has a memory leak vulnerability

Communication Dsoftbus has an UAF vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has a buffer overflow vulnerability

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

Communication Dsoftbus has an UAF vulnerability