The kernel subsystem function checkpermissionforsettokenid within OpenHarmony-v3.1.5 and prior versions has an

UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions,

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an

arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.