Latest vulnerabilities for "openharmony openharmony"

OpenHarmony OpenHarmonykernel_linux_common_modules has a Race Condition vulnerability

Risk 18

Severity

3.3

First published (updated )

CVE-2026-33565

OpenHarmony OpenHarmonyfilemanagement_storage_service has an use after free vulnerability

Risk 36

Severity

6.5

First published (updated )

CVE-2026-28733

OpenHarmony OpenHarmonymultimedia_audio_framework has a Race Condition vulnerability

Risk 32

Severity

5.5

First published (updated )

CVE-2026-27766

OpenHarmony OpenHarmonyfilemanagement_storage_service has an improper preservation of permissions vulnerability

Risk 32

Severity

5.5

First published (updated )

CVE-2026-25850

OpenHarmony OpenHarmonykernel_liteos_a has an out-of-bounds write vulnerability

Risk 59

Severity

8.4

First published (updated )

CVE-2026-25781

OpenHarmony OpenHarmonyfilemanagement_storage_service has an improper input validation vulnerability

Risk 18

Severity

3.3

First published (updated )

CVE-2026-28751

OpenHarmony OpenHarmonykernel_liteos_a has an integer overflow vulnerability

Risk 18

Severity

3.3

First published (updated )

CVE-2026-27781

OpenHarmony OpenHarmonyweb_webview has a Race Condition vulnerability

Risk 60

Severity

8.1

First published (updated )

CVE-2026-24792

Openatom Openharmonyability_ability_runtime an improper input validation vulnerability

Risk 32

Severity

5.5

First published (updated )

CVE-2025-6969

OpenHarmony OpenHarmonycommunication_ipc an improper input validation vulnerability

Risk 18

Severity

3.3

First published (updated )

CVE-2025-26474

Openatom Openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability

Risk 69

Severity

7.8

First published (updated )

CVE-2025-52458

Openatom Openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability

Risk 69

Severity

7.8

First published (updated )

CVE-2025-41432

OpenHarmony OpenHarmonymultimedia_audio_standard has an insecure storage of sensitive information vulnerability

Risk 36

Severity

6.5

First published (updated )

CVE-2025-12736

OpenHarmony OpenHarmonyliteos_a has a missing release of memory vulnerability

Risk 32

Severity

5.5

First published (updated )

CVE-2026-0639

OpenHarmony OpenHarmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.

Risk 21

Severity

4

First published (updated )

CVE-2022-41802

OpenHarmony OpenHarmonyAn abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

Risk 43

Severity

7.5

First published (updated )

CVE-2022-43495

OpenHarmony OpenHarmonyArbitrary file read via download_server.

Risk 36

Severity

6.2

First published (updated )

CVE-2022-43449

OpenHarmony OpenHarmonyMultiple path traversal in appspawn and nwebspawn services.

Risk 74

Severity

8.4

First published (updated )

CVE-2022-43451

OpenHarmony OpenHarmonyKernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...

Risk 69

Severity

7.8

First published (updated )

CVE-2022-42464

OpenHarmony OpenHarmonySoftbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...

Risk 79

Severity

8.8

First published (updated )

CVE-2022-42463

OpenHarmony OpenHarmonyOut-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...

Risk 32

Severity

5.1

First published (updated )

CVE-2022-41686

OpenHarmony OpenHarmonyStartup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.

Risk 74

Severity

8.4

First published (updated )

CVE-2022-42488

OpenHarmony OpenHarmonyTokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.

Risk 36

Severity

6.2

First published (updated )

CVE-2022-38081

Trending

Versions

OpenHarmony OpenHarmonykernel_linux_common_modules has a Race Condition vulnerability

OpenHarmony OpenHarmonyfilemanagement_storage_service has an use after free vulnerability

OpenHarmony OpenHarmonymultimedia_audio_framework has a Race Condition vulnerability

OpenHarmony OpenHarmonyfilemanagement_storage_service has an improper preservation of permissions vulnerability

OpenHarmony OpenHarmonykernel_liteos_a has an out-of-bounds write vulnerability

Don't miss critical vulnerabilities

OpenHarmony OpenHarmonyfilemanagement_storage_service has an improper input validation vulnerability

OpenHarmony OpenHarmonykernel_liteos_a has an integer overflow vulnerability

OpenHarmony OpenHarmonyweb_webview has a Race Condition vulnerability

Openatom Openharmonyability_ability_runtime an improper input validation vulnerability

OpenHarmony OpenHarmonycommunication_ipc an improper input validation vulnerability

Don't miss critical vulnerabilities

Openatom Openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability

Openatom Openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability

OpenHarmony OpenHarmonymultimedia_audio_standard has an insecure storage of sensitive information vulnerability

OpenHarmony OpenHarmonyliteos_a has a missing release of memory vulnerability

OpenHarmony OpenHarmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.

Don't miss critical vulnerabilities

OpenHarmony OpenHarmonyAn abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

OpenHarmony OpenHarmonyArbitrary file read via download_server.

OpenHarmony OpenHarmonyMultiple path traversal in appspawn and nwebspawn services.

OpenHarmony OpenHarmonyKernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...

OpenHarmony OpenHarmonySoftbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...

Don't miss critical vulnerabilities

OpenHarmony OpenHarmonyOut-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...

OpenHarmony OpenHarmonyStartup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.

OpenHarmony OpenHarmonyTokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.

Company

Resources

Contact