OP
Product
Openharmony
156
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 58Medium 87Low 6
Watch
Add Openharmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47402 | 5.5 | Nov 5 | Liteos_a has an Out-of-bounds Read vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-45382 | 5.5 | Oct 8 | Liteos_a has an Out-of-bounds Write vulnerability Affected: through 4.1.0 |
| CVE-2024-43697 | 5.5 | Oct 8 | Liteos_a has an Improper Input Validation vulnerability Affected: through 4.1.0 |
| CVE-2024-43696 | 5.5 | Oct 8 | Liteos_a has an Memory Leak vulnerability Affected: through 4.1.0 |
| CVE-2024-39806 | 5.5 | Oct 8 | Liteos_a has an out-of-bounds Read vulnerability Affected: through 4.1.0 |
| CVE-2024-39612 | 5.5 | Sep 2 | Background Task Manager has an out-of-bounds read permission bypass vulnerability Affected: 4.0; 4.0; 4.0; 4.0.1 |
| CVE-2024-38382 | 5.5 | Sep 2 | Ability Runtime has an out-of-bounds read permission bypass vulnerability Affected: 4.0; 4.0; 4.0; 4.0.1 |
| CVE-2024-28044 | 5.5 | Sep 2 | Liteos-A has an integer overflow vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-3757 | 5.5 | May 7 | Arkcompiler runtime has an integer overflow vulnerability Affected: before 4.0.1 |
| CVE-2024-31078 | 5.5 | May 7 | Bluetooth Service has a use after free vulnerability Affected: before 4.0.1 |
| CVE-2024-29086 | 5.5 | Apr 2 | Arkcompiler runtime has a stack overflow svulnerability Affected: through 3.2.4 |
| CVE-2024-22180 | 5.5 | Apr 2 | Camera has a use after free vulnerability Affected: 3.2 through 4.0 |
| CVE-2024-22177 | 5.5 | Apr 2 | Audio has an improper preservation of permissions vulnerability Affected: through 3.2.4 |
| CVE-2024-21834 | 5.5 | Apr 2 | Arkui has a type confusion vulnerability Affected: through 3.2.4 |
| CVE-2024-21826 | 5.5 | Mar 4 | Huks has an insecure storage of sensitive information vulnerability Affected: 3.2 through 3.2.4 |
| CVE-2024-21816 | 5.5 | Mar 4 | Background task manager has an improper preservation of permissions vulnerability Affected: 4.0 |
| CVE-2023-49602 | 5.5 | Mar 4 | Arkui has a type confusion vulnerability Affected: 3.2 through 3.2.4 |
| CVE-2023-25176 | 5.5 | Mar 4 | Pasteboard has an out-of-bounds read vulnerability Affected: 3.2 through 3.2.4 |
| CVE-2024-0285 | 5.5 | Feb 2 | Dsoftbus has an improper input validation vulnerability Affected: 3.2.0 through 3.2.4; 4.0 |
| CVE-2023-49118 | 5.5 | Feb 2 | Dsoftbus has an out-of-bounds read vulnerability Affected: 3.2.0 through 3.2.4 |
| CVE-2023-43756 | 5.5 | Feb 2 | Dsoftbus has an out-of-bounds read vulnerability Affected: through 3.2.4 |
| CVE-2023-49135 | 5.5 | Jan 2 | multimedia player has a UAF vulnerability Affected: through 3.2.2 |
| CVE-2023-48360 | 5.5 | Jan 2 | multimedia player has a UAF vulnerability Affected: through 3.2.2 |
| CVE-2023-47857 | 5.5 | Jan 2 | multimedia camera has a UAF vulnerability Affected: through 3.2.2 |
| CVE-2023-47216 | 5.5 | Jan 2 | Liteos-A has a missing release of resource vulnerability Affected: through 3.2.2 |
| CVE-2023-47217 | 5.5 | Nov 20 | Arkruntime has a buffer overflow vulnerability Affected: through 3.2.2 |
| CVE-2023-46100 | 5.5 | Nov 20 | Cert manager has a use of uninitialized resource vulnerability Affected: through 3.2.2 |
| CVE-2023-42774 | 5.5 | Nov 20 | Liteos-A has a incorrect default permissions vulnerability Affected: through 3.2.2 |
| CVE-2023-46705 | 5.5 | Nov 20 | Arkruntime has a type confusion vulnerability Affected: through 3.2.2 |
| CVE-2023-4753 | 5.5 | Sep 21 | OpenHarmony v3.2.1 and prior version has a system call function usage error Affected: through 3.2.1 |
| CVE-2023-25947 | 5.5 | Mar 10 | The bundle management subsystem has a improper input validation when installing a HAP package. Affected: 3.1 through 3.1.4 |
| CVE-2023-24465 | 5.5 | Mar 10 | Communication Wi-Fi subsystem has a null pointer reference vulnerability when receving external data. Affected: 3.0 through 3.0.7; 3.1 through 3.1.4 |
| CVE-2023-0083 | 5.5 | Mar 10 | The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access. Affected: 3.0 through 3.0.7; 3.1 through 3.1.5 |
| CVE-2025-20081 | 5.3 | Mar 4 | Communication Dsoftbus has an UAF vulnerability Affected: 4.1 through 5.0.2 |
| CVE-2025-20024 | 5.3 | Mar 4 | Arkcompiler Ets Runtime has an integer overflow vulnerability Affected: 4.1 through 5.0.2 |
| CVE-2025-24493 | 4.7 | Jun 8 | kernel_liteos_a has a race condition vulnerability Affected: through 5.0.3 |
| CVE-2022-41686 | 4.4 | Oct 14 | Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ... Affected: 3.1 through 3.1.2 |