Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 156

Export CSV
CVE-2025-20081

Communication Dsoftbus has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-20024

Arkcompiler Ets Runtime has an integer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-21084

Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-21097

Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-25947

The bundle management subsystem has a improper input validation when installing a HAP package.

The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-0083

The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-22301

The kernel subsystem hmdfs has a arbitrary memory accessing vulnerability.

The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-0302

Liteos_a has an integer overflow read vulnerability

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-0303

Liteos_a has a buffer overflow vulnerability

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-0304

Liteos_a has an use after free vulnerability

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-28226

Fs has an improper input validation vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22180

Camera has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22092

Bundlemanager has an authentication bypass vulnerability

in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-28951

Arkcompiler runtime has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21834

Arkui has a type confusion vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22098

AVSession has a use after free vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22177

Audio has an improper preservation of permissions vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-29086

Arkcompiler runtime has a stack overflow svulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-23808

Arkcompiler ets frontend has an out-of-bounds read vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-27217

MSDP has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony