Filter
Openharmony OpenharmonyOpenHarmony v3.2.1 and prior version has a system call function usage error
5.5
First published (updated )
Openharmony OpenharmonyNull Pointer Dereference, Input Validation
5.5
First published (updated )
Openharmony OpenharmonyInput Validation, Null Pointer Dereference
6.2
First published (updated )
Openharmony OpenharmonyThe kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.
7.8
First published (updated )
Openharmony OpenharmonyThe kernel subsystem hmdfs has a arbitrary memory accessing vulnerability.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonyThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.
5.5
First published (updated )
Openharmony Openharmonyplatform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack".
7.8
First published (updated )
Openharmony Openharmonysoftbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".
7.8
First published (updated )
Openharmony OpenharmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime.
7.8
First published (updated )
Openharmony OpenharmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonyPIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.
8.3
First published (updated )
Openharmony OpenharmonyTelephony in communication subsystem sends public events with personal data, but the permission is not set.
6.2
First published (updated )
Openharmony OpenharmonyThe appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.
7.8
First published (updated )
Openharmony OpenharmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.
First published (updated )
Openharmony OpenharmonyAn abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonyArbitrary file read via download_server.
6.2
First published (updated )
Openharmony OpenharmonyMultiple path traversal in appspawn and nwebspawn services.
8.4
First published (updated )
Openharmony OpenharmonyKernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...
7.8
First published (updated )
Openharmony OpenharmonyOut-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...
5.1
First published (updated )
Openharmony OpenharmonyStartup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.
8.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonySoftbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...
8.8
First published (updated )
Openharmony OpenharmonyIPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.
6.2
First published (updated )
Openharmony Openharmonywindowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.
6.2
First published (updated )
Openharmony Openharmonymultimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.
8.8
First published (updated )
Openharmony OpenharmonyIncorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonyTokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.
6.2
First published (updated )