Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 156

Export CSV
CVE-2024-3757

Arkcompiler runtime has an integer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-31078

Bluetooth Service has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-3758

Hmdfs has a heap buffer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-3759

Hmdfs has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21816

Background task manager has an improper preservation of permissions vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21826

Huks has an insecure storage of sensitive information vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-49602

Arkui has a type confusion vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-46708

Wlan has a use after free vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-25176

Pasteboard has an out-of-bounds read vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-9978

Liteos_a has an out-of-bounds read vulnerability

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-12082

Ability Runtime has an out-of-bounds read permission bypass vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-10074

Liteos_a has an use after free vulnerability

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2024-37185

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-37077

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-37030

Arkcompiler Ets Runtime has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-36278

Arkcompiler Ets Runtime has a type confusion vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-36260

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-36243

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-31071

Arkcompiler Ets Runtime has a type confusion vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21863

Dsoftbus has an improper input validation vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony