OP
Product
OpenHarmony
177
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 66Medium 96Low 10
Watch
Add OpenHarmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33565 | 3.3 | May 19 | kernel_linux_common_modules has a Race Condition vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2026-28751 | 3.3 | May 19 | filemanagement_storage_service has an improper input validation vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2026-27781 | 3.3 | May 19 | kernel_liteos_a has an integer overflow vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2026-25110 | 3.3 | May 19 | Sensors_medical_sensor has a NULL pointer dereference vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2025-26474 | 3.3 | Mar 16 | communication_ipc an improper input validation vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2024-36278 | 3.3 | Jul 2 | Arkcompiler Ets Runtime has a type confusion vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-31071 | 3.3 | Jul 2 | Arkcompiler Ets Runtime has a type confusion vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2023-49142 | 3.3 | Jan 2 | multimedia audio has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2022-41802 | 3.3 | Dec 8 | Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. Affected: 3.1.0; 3.0.0; 1.1.0 |
| CVE-2022-38701 | 3.3 | Sep 9 | IPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information. Affected: OpenHarmony-v3.1.x-Release through 3.1.2; OpenHarmony-v3.0.x-LTS through 3.0.5 |
Showing 10