CVE-2025-25218

third_party_mksh has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-0285

Dsoftbus has an improper input validation vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2023-47216

Liteos-A has a missing release of resource vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2022-43662

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime.

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2023-0035

softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2022-45126

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2023-0036

platform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-29074

Telephony has an improper input validation vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-0587

Arkcompiler Ets Runtime has an integer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-22835

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-23414

Arkcompiler Ets Runtime has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-23418

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-23420

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-24301

Arkcompiler Ets Runtime has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-24309

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-24581

Arkcompiler runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2023-22436

The kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.

The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2023-24465

Communication Wi-Fi  subsystem has a null pointer reference vulnerability when receving external data.

Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-20042

Liteos-A has an out of bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2025-20021

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony