# OpenHarmony.

Every CVE that names OpenHarmony among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [kernel_linux_common_modules has a Race Condition vulnerability](https://agentprime.io/advisories/CVE-2026-33565.md)
  `CVE-2026-33565` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 19 May 2026 · Tags: CWE-364
- [filemanagement_storage_service has an use after free vulnerability](https://agentprime.io/advisories/CVE-2026-28733.md)
  `CVE-2026-28733` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: Memory corruption
- [multimedia_audio_framework has a Race Condition vulnerability](https://agentprime.io/advisories/CVE-2026-27766.md)
  `CVE-2026-27766` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-364
- [filemanagement_storage_service has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2026-25850.md)
  `CVE-2026-25850` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-281
- [kernel_liteos_a has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2026-25781.md)
  `CVE-2026-25781` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 19 May 2026 · Tags: Memory corruption
- [filemanagement_storage_service has an improper input validation vulnerability](https://agentprime.io/advisories/CVE-2026-28751.md)
  `CVE-2026-28751` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 19 May 2026 · Tags: CWE-20
- [kernel_liteos_a has an integer overflow vulnerability](https://agentprime.io/advisories/CVE-2026-27781.md)
  `CVE-2026-27781` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 19 May 2026 · Tags: Memory corruption
- [web_webview has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2026-27648.md)
  `CVE-2026-27648` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 19 May 2026 · Tags: Memory corruption
- [Sensors_medical_sensor has a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2026-25110.md)
  `CVE-2026-25110` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 19 May 2026 · Tags: Memory corruption
- [web_webview has a Race Condition vulnerability](https://agentprime.io/advisories/CVE-2026-24792.md)
  `CVE-2026-24792` · CVE record: OpenHarmony OpenHarmony · CVSS 8.1 High · Not analysed yet · Published 19 May 2026 · Tags: CWE-364
- [ability_ability_runtime an improper input validation vulnerability](https://agentprime.io/advisories/CVE-2025-6969.md)
  `CVE-2025-6969` · CVE record: OpenHarmony OpenHarmony · CVSS 5.0 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-20
- [communication_ipc an improper input validation vulnerability](https://agentprime.io/advisories/CVE-2025-26474.md)
  `CVE-2025-26474` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-20
- [arkcompiler_ets_runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-52458.md)
  `CVE-2025-52458` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption
- [arkcompiler_ets_runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-41432.md)
  `CVE-2025-41432` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption
- [arkcompiler_ets_runtime has a type confusion vulnerability](https://agentprime.io/advisories/CVE-2025-25277.md)
  `CVE-2025-25277` · CVE record: OpenHarmony OpenHarmony · CVSS 6.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption
- [multimedia_audio_standard has an insecure storage of sensitive information vulnerability](https://agentprime.io/advisories/CVE-2025-12736.md)
  `CVE-2025-12736` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption
- [liteos_a has a missing release of memory vulnerability](https://agentprime.io/advisories/CVE-2026-0639.md)
  `CVE-2026-0639` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 16 Mar 2026 · Tags: Denial of service
- [communication_dsoftbus has a missing release of memory vulnerability](https://agentprime.io/advisories/CVE-2025-27562.md)
  `CVE-2025-27562` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2025 · Tags: Denial of service
- [liteos_a has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-27128.md)
  `CVE-2025-27128` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [pasteboard has an improper input vulnerability](https://agentprime.io/advisories/CVE-2025-25212.md)
  `CVE-2025-25212` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2025 · Tags: CWE-20
- [communication_dsoftbus has a missing release of memory vulnerability](https://agentprime.io/advisories/CVE-2025-24844.md)
  `CVE-2025-24844` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2025 · Tags: Denial of service
- [arkcompiler_ets_runtime has a type confusion vulnerability](https://agentprime.io/advisories/CVE-2025-27536.md)
  `CVE-2025-27536` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [communication dsoftbus has a NULL pointer vulnerability](https://agentprime.io/advisories/CVE-2025-26690.md)
  `CVE-2025-26690` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [applications_settings has a missing release of memory vulnerability](https://agentprime.io/advisories/CVE-2025-24925.md)
  `CVE-2025-24925` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2025 · Tags: Denial of service
- [liteos_a has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-24298.md)
  `CVE-2025-24298` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [liteos_a has a race condition vulnerability](https://agentprime.io/advisories/CVE-2025-25278.md)
  `CVE-2025-25278` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2025 · Tags: Race condition
- [liteos_a has a race condition vulnerability](https://agentprime.io/advisories/CVE-2025-27577.md)
  `CVE-2025-27577` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2025 · Tags: Race condition
- [Pasteboard has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-27247.md)
  `CVE-2025-27247` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [Ssecurity_component_manager has an improper input vulnerability](https://agentprime.io/advisories/CVE-2025-27242.md)
  `CVE-2025-27242` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-20
- [security_access_token has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-27563.md)
  `CVE-2025-27563` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [security_access_token has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-26693.md)
  `CVE-2025-26693` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [telephony_call_manager has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-26691.md)
  `CVE-2025-26691` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [kernel_liteos_m has an improper input vulnerability](https://agentprime.io/advisories/CVE-2025-27131.md)
  `CVE-2025-27131` · CVE record: OpenHarmony OpenHarmony · CVSS 6.1 Medium · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-20
- [kernel_liteos_a has a race condition vulnerability](https://agentprime.io/advisories/CVE-2025-24493.md)
  `CVE-2025-24493` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 8 Jun 2025 · Tags: Race condition
- [arkui_ace_enginehas a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-25217.md)
  `CVE-2025-25217` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: Memory corruption
- [arkcompiler_ets_runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-23235.md)
  `CVE-2025-23235` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: Memory corruption
- [arkui_ace_engine has a type confusion vulnerability](https://agentprime.io/advisories/CVE-2025-21082.md)
  `CVE-2025-21082` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: Memory corruption
- [arkui_ace_engine has a type confusion vulnerability](https://agentprime.io/advisories/CVE-2025-20063.md)
  `CVE-2025-20063` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: Memory corruption
- [arkcompiler_ets_runtime has a buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-25052.md)
  `CVE-2025-25052` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [multimedia_av_codec has a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-27241.md)
  `CVE-2025-27241` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [ai_neural_network_runtime has a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-27248.md)
  `CVE-2025-27248` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [distributeddatamgr_udmf has a memory leak vulnerability](https://agentprime.io/advisories/CVE-2025-22886.md)
  `CVE-2025-22886` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 6 May 2025 · Tags: Denial of service
- [arkcompiler_ets_runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-27132.md)
  `CVE-2025-27132` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [third_party_mksh has a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-25218.md)
  `CVE-2025-25218` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [arkcompiler_ets_runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-27534.md)
  `CVE-2025-27534` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [third_party_NuttX has a memory leak vulnerability](https://agentprime.io/advisories/CVE-2025-25057.md)
  `CVE-2025-25057` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Denial of service
- [arkcompiler_ets_runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-24304.md)
  `CVE-2025-24304` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [Liteos_A has an integer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-22851.md)
  `CVE-2025-22851` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [arkcompiler_ets_runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-22842.md)
  `CVE-2025-22842` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [arkcompiler_ets_runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-22452.md)
  `CVE-2025-22452` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [arkcompiler_ets_runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-20102.md)
  `CVE-2025-20102` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-24309.md)
  `CVE-2025-24309` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-24301.md)
  `CVE-2025-24301` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-23420.md)
  `CVE-2025-23420` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-23418.md)
  `CVE-2025-23418` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-23414.md)
  `CVE-2025-23414` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Communication Dsoftbus has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-23409.md)
  `CVE-2025-23409` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-23240.md)
  `CVE-2025-23240` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has a buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-23234.md)
  `CVE-2025-23234` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has a buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-22897.md)
  `CVE-2025-22897` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/openharmony.md?cursor=WyIyMDI1LTAzLTA0VDAzOjQ0OjQ0LjMxMzAwMFoiLCJDVkUtMjAyNS0yMjg5NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=openharmony>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/openharmony/>. Everything for agents: <https://agentprime.io/llms.txt>.