Filter
AND
Openharmony OpenharmonyOpenHarmony v3.2.1 and prior version has a system call function usage error
5.5
First published (updated )
Openharmony OpenharmonyTelephony in communication subsystem sends public events with personal data, but the permission is not set.
6.2
First published (updated )
Openharmony OpenharmonyOut-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...
5.1
First published (updated )
Openharmony OpenharmonyIPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.
6.2
First published (updated )
Openharmony Openharmonywindowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.
First published (updated )
Openharmony OpenharmonyNull Pointer Dereference, Input Validation
5.5
First published (updated )
Openharmony OpenharmonyInput Validation, Null Pointer Dereference
6.2
First published (updated )
Openharmony OpenharmonyThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.
5.5
First published (updated )
Openharmony OpenharmonyArbitrary file read via download_server.
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Openharmony OpenharmonyTokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.
6.2
First published (updated )