Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 166

Export CSV
CVE-2021-33656

kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Linux Openatom and 1 more
Products
Debian Linux Linux Kernel Openeuler and 3 more
CVE-2021-33643

libtar: out-of-bounds read in gnu_longlink

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Feep Openatom and 1 more
Products
Fedora Libtar Openeuler and 1 more
CVE-2025-12736

multimedia_audio_standard has an insecure storage of sensitive information vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-25277

arkcompiler_ets_runtime has a type confusion vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-41432

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-52458

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-26474

communication_ipc an improper input validation vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-6969

ability_ability_runtime an improper input validation vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2021-33646

libtar: memory leak found in th_read() function

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Fedoraproject Feep Openatom and 1 more
Products
Fedora Libtar Openeuler and 1 more
CVE-2021-33645

libtar: memory leak found in th_read() function

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Fedoraproject Feep Openatom and 1 more
Products
Fedora Libtar Openeuler and 1 more
CVE-2021-33644

libtar: out-of-bounds read in gnu_longname

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.

CVSS 3.1 · 8.1 High EPSS 1.6% KEV · Not listed
Vendors
Fedoraproject Feep Openatom and 1 more
Products
Fedora Libtar Openeuler and 1 more
CVE-2024-47398

Liteos_a has an out-of-bounds write vulnerability

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-27534

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony
CVE-2025-25057

third_party_NuttX has a memory leak vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openatom
Products
Openharmony
CVE-2025-22851

Liteos_A has an integer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openatom Openharmony
Products
Openharmony Openharmony