# OpenHarmony.

Every CVE that names OpenHarmony among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-22847.md)
  `CVE-2025-22847` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-22841.md)
  `CVE-2025-22841` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-22837.md)
  `CVE-2025-22837` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2025-22835.md)
  `CVE-2025-22835` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-22443.md)
  `CVE-2025-22443` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Liteos-A has an insecure storage of sensitive information vulnerability](https://agentprime.io/advisories/CVE-2025-21098.md)
  `CVE-2025-21098` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Information disclosure
- [Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-21097.md)
  `CVE-2025-21097` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-21089.md)
  `CVE-2025-21089` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability](https://agentprime.io/advisories/CVE-2025-21084.md)
  `CVE-2025-21084` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-20626.md)
  `CVE-2025-20626` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Communication Dsoftbus has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-20091.md)
  `CVE-2025-20091` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Communication Dsoftbus has an UAF vulnerability](https://agentprime.io/advisories/CVE-2025-20081.md)
  `CVE-2025-20081` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Liteos-A has an out of bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-20042.md)
  `CVE-2025-20042` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an integer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-20024.md)
  `CVE-2025-20024` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2025-20021.md)
  `CVE-2025-20021` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Communication Dsoftbus has a memory leak vulnerability](https://agentprime.io/advisories/CVE-2025-20011.md)
  `CVE-2025-20011` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Denial of service
- [Arkcompiler Ets Runtime has an integer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-0587.md)
  `CVE-2025-0587` · CVE record: OpenHarmony OpenHarmony · CVSS 3.8 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption
- [Liteos_a has an use after free vulnerability](https://agentprime.io/advisories/CVE-2025-0304.md)
  `CVE-2025-0304` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 7 Feb 2025 · Tags: Memory corruption
- [Liteos_a has a buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2025-0303.md)
  `CVE-2025-0303` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 7 Feb 2025 · Tags: Memory corruption
- [Liteos_a has an integer overflow read vulnerability](https://agentprime.io/advisories/CVE-2025-0302.md)
  `CVE-2025-0302` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 7 Feb 2025 · Tags: Memory corruption
- [Communication_dsoftbus has an UAF vulnerability](https://agentprime.io/advisories/CVE-2024-54030.md)
  `CVE-2024-54030` · CVE record: OpenHarmony OpenHarmony · CVSS 4.4 Medium · Not analysed yet · Published 7 Jan 2025 · Tags: Memory corruption
- [Liteos_a has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-47398.md)
  `CVE-2024-47398` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2025 · Tags: Memory corruption
- [Liteos_a has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2024-45070.md)
  `CVE-2024-45070` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2025 · Tags: Memory corruption
- [Liteos_a has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2024-9978.md)
  `CVE-2024-9978` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 3 Dec 2024 · Tags: Memory corruption
- [Ability Runtime has an out-of-bounds read permission bypass vulnerability](https://agentprime.io/advisories/CVE-2024-12082.md)
  `CVE-2024-12082` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 3 Dec 2024 · Tags: Memory corruption, Information disclosure
- [Liteos_a has an use after free vulnerability](https://agentprime.io/advisories/CVE-2024-10074.md)
  `CVE-2024-10074` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 3 Dec 2024 · Tags: Memory corruption
- [Liteos_a has an Out-of-bounds Read vulnerability](https://agentprime.io/advisories/CVE-2024-47402.md)
  `CVE-2024-47402` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 5 Nov 2024 · Tags: Memory corruption
- [Liteos_a has an out-of-bounds Write vulnerability](https://agentprime.io/advisories/CVE-2024-47137.md)
  `CVE-2024-47137` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 5 Nov 2024 · Tags: Memory corruption
- [Liteos_a has a double free vulnerability](https://agentprime.io/advisories/CVE-2024-47404.md)
  `CVE-2024-47404` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 5 Nov 2024 · Tags: Memory corruption
- [Liteos_a has an out-of-bounds Write vulnerability](https://agentprime.io/advisories/CVE-2024-47797.md)
  `CVE-2024-47797` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 5 Nov 2024 · Tags: Memory corruption
- [Liteos_a has an Out-of-bounds Write vulnerability](https://agentprime.io/advisories/CVE-2024-45382.md)
  `CVE-2024-45382` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Liteos_a has an Improper Input Validation vulnerability](https://agentprime.io/advisories/CVE-2024-43697.md)
  `CVE-2024-43697` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-20
- [Liteos_a has an Memory Leak vulnerability](https://agentprime.io/advisories/CVE-2024-43696.md)
  `CVE-2024-43696` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Oct 2024 · Tags: Denial of service
- [AccessTokenManager has an use after free vulnerability](https://agentprime.io/advisories/CVE-2024-39831.md)
  `CVE-2024-39831` · CVE record: OpenHarmony OpenHarmony · CVSS 4.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Liteos_a has an out-of-bounds Read vulnerability](https://agentprime.io/advisories/CVE-2024-39806.md)
  `CVE-2024-39806` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Memory corruption
- [Liteos-A has an use after free vulnerability](https://agentprime.io/advisories/CVE-2024-41160.md)
  `CVE-2024-41160` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption
- [Liteos-A has an use after free vulnerability](https://agentprime.io/advisories/CVE-2024-41157.md)
  `CVE-2024-41157` · CVE record: OpenHarmony OpenHarmony · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-39816.md)
  `CVE-2024-39816` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption
- [Net Manager has an out-of-bounds read permission bypass vulnerability](https://agentprime.io/advisories/CVE-2024-39775.md)
  `CVE-2024-39775` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption, Information disclosure
- [Background Task Manager has an out-of-bounds read permission bypass vulnerability](https://agentprime.io/advisories/CVE-2024-39612.md)
  `CVE-2024-39612` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption, Information disclosure
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-38386.md)
  `CVE-2024-38386` · CVE record: OpenHarmony OpenHarmony · CVSS 8.4 High · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption
- [Ability Runtime has an out-of-bounds read permission bypass vulnerability](https://agentprime.io/advisories/CVE-2024-38382.md)
  `CVE-2024-38382` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption, Information disclosure
- [Liteos-A has an integer overflow vulnerability](https://agentprime.io/advisories/CVE-2024-28044.md)
  `CVE-2024-28044` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 2 Sept 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-37077.md)
  `CVE-2024-37077` · CVE record: OpenHarmony OpenHarmony · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-37185.md)
  `CVE-2024-37185` · CVE record: OpenHarmony OpenHarmony · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-36260.md)
  `CVE-2024-36260` · CVE record: OpenHarmony OpenHarmony · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has a type confusion vulnerability](https://agentprime.io/advisories/CVE-2024-36278.md)
  `CVE-2024-36278` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2024-36243.md)
  `CVE-2024-36243` · CVE record: OpenHarmony OpenHarmony · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has a use after free vulnerability](https://agentprime.io/advisories/CVE-2024-37030.md)
  `CVE-2024-37030` · CVE record: OpenHarmony OpenHarmony · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Arkcompiler Ets Runtime has a type confusion vulnerability](https://agentprime.io/advisories/CVE-2024-31071.md)
  `CVE-2024-31071` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Hmdfs has a use after free vulnerability](https://agentprime.io/advisories/CVE-2024-3759.md)
  `CVE-2024-3759` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption
- [Hmdfs has a heap buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2024-3758.md)
  `CVE-2024-3758` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption
- [Arkcompiler runtime has an integer overflow vulnerability](https://agentprime.io/advisories/CVE-2024-3757.md)
  `CVE-2024-3757` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption
- [Bluetooth Service has a use after free vulnerability](https://agentprime.io/advisories/CVE-2024-31078.md)
  `CVE-2024-31078` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption
- [Arkcompiler ets frontend has an out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2024-23808.md)
  `CVE-2024-23808` · CVE record: OpenHarmony OpenHarmony · CVSS 5.2 Medium · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption
- [MSDP has a use after free vulnerability](https://agentprime.io/advisories/CVE-2024-27217.md)
  `CVE-2024-27217` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption
- [Arkcompiler runtime has a stack overflow svulnerability](https://agentprime.io/advisories/CVE-2024-29086.md)
  `CVE-2024-29086` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 2 Apr 2024 · Tags: Denial of service
- [Arkcompiler runtime has a use after free vulnerability](https://agentprime.io/advisories/CVE-2024-28951.md)
  `CVE-2024-28951` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 2 Apr 2024 · Tags: Memory corruption
- [Fs has an improper input validation vulnerability](https://agentprime.io/advisories/CVE-2024-28226.md)
  `CVE-2024-28226` · CVE record: OpenHarmony OpenHarmony · CVSS 8.1 High · Not analysed yet · Published 2 Apr 2024 · Tags: CWE-20
- [Arkcompiler runtime has an out-of-bounds write vulnerability](https://agentprime.io/advisories/CVE-2024-24581.md)
  `CVE-2024-24581` · CVE record: OpenHarmony OpenHarmony · CVSS 6.5 Medium · Not analysed yet · Published 2 Apr 2024 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/openharmony.md>
Older: <https://agentprime.io/advisories/technology/openharmony.md?cursor=WyIyMDI0LTA0LTAyVDA2OjIzOjAzLjE0MTAwMFoiLCJDVkUtMjAyNC0yNDU4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=openharmony&cursor=WyIyMDI1LTAzLTA0VDAzOjQ0OjQ0LjMxMzAwMFoiLCJDVkUtMjAyNS0yMjg5NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/openharmony/?cursor=WyIyMDI1LTAzLTA0VDAzOjQ0OjQ0LjMxMzAwMFoiLCJDVkUtMjAyNS0yMjg5NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.