Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 166

Export CSV
CVE-2024-28226

Fs has an improper input validation vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22180

Camera has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22092

Bundlemanager has an authentication bypass vulnerability

in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-28951

Arkcompiler runtime has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21834

Arkui has a type confusion vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22098

AVSession has a use after free vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-22177

Audio has an improper preservation of permissions vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-29086

Arkcompiler runtime has a stack overflow svulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-23808

Arkcompiler ets frontend has an out-of-bounds read vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-27217

MSDP has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-3757

Arkcompiler runtime has an integer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-31078

Bluetooth Service has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-3758

Hmdfs has a heap buffer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-3759

Hmdfs has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21816

Background task manager has an improper preservation of permissions vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-21826

Huks has an insecure storage of sensitive information vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-49602

Arkui has a type confusion vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-46708

Wlan has a use after free vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2023-25176

Pasteboard has an out-of-bounds read vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2024-9978

Liteos_a has an out-of-bounds read vulnerability

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony