Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 166

Export CSV
CVE-2025-22837

Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-23240

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-23409

Communication Dsoftbus has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2023-49142

multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-48360

multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-20063

arkui_ace_engine has a type confusion vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-21082

arkui_ace_engine has a type confusion vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-23235

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-24493

kernel_liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-25217

arkui_ace_enginehas a NULL pointer dereference vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-26691

telephony_call_manager has an improper preservation of permissions vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-26693

security_access_token has an improper preservation of permissions vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-27131

kernel_liteos_m has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-27242

Ssecurity_component_manager has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-27247

Pasteboard has an improper preservation of permissions vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-27563

security_access_token has an improper preservation of permissions vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-47857

multimedia camera has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2022-41686

Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The processes with system user UID run on the device would be able to write out-of-bound memory which could lead to unspecified memory corruption.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony