Advisories · Technology

OpenHarmony.

Every CVE that names OpenHarmony among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-33565 CVE record

CVSS 3.3 Low

kernel_linux_common_modules has a Race Condition vulnerability
- OpenHarmony
- CWE-364
Not analysed yet 19 May 2026
CVE-2026-28733 CVE record

CVSS 6.5 Medium

filemanagement_storage_service has an use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 19 May 2026
CVE-2026-27766 CVE record

CVSS 5.5 Medium

multimedia_audio_framework has a Race Condition vulnerability
- OpenHarmony
- CWE-364
Not analysed yet 19 May 2026
CVE-2026-25850 CVE record

CVSS 5.5 Medium

filemanagement_storage_service has an improper preservation of permissions vulnerability
- OpenHarmony
- CWE-281
Not analysed yet 19 May 2026
CVE-2026-25781 CVE record

CVSS 8.4 High

kernel_liteos_a has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 19 May 2026
CVE-2026-28751 CVE record

CVSS 3.3 Low

filemanagement_storage_service has an improper input validation vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 19 May 2026
CVE-2026-27781 CVE record

CVSS 3.3 Low

kernel_liteos_a has an integer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 19 May 2026
CVE-2026-27648 CVE record

CVSS 8.8 High

web_webview has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 19 May 2026
CVE-2026-25110 CVE record

CVSS 3.3 Low

Sensors_medical_sensor has a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 19 May 2026
CVE-2026-24792 CVE record

CVSS 8.1 High

web_webview has a Race Condition vulnerability
- OpenHarmony
- CWE-364
Not analysed yet 19 May 2026
CVE-2025-6969 CVE record

CVSS 5.0 Medium

ability_ability_runtime an improper input validation vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 16 Mar 2026
CVE-2025-26474 CVE record

CVSS 3.3 Low

communication_ipc an improper input validation vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 16 Mar 2026
CVE-2025-52458 CVE record

CVSS 5.5 Medium

arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2025-41432 CVE record

CVSS 5.5 Medium

arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2025-25277 CVE record

CVSS 6.3 Medium

arkcompiler_ets_runtime has a type confusion vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2025-12736 CVE record

CVSS 6.5 Medium

multimedia_audio_standard has an insecure storage of sensitive information vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2026-0639 CVE record

CVSS 3.3 Low

liteos_a has a missing release of memory vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 16 Mar 2026
CVE-2025-27562 CVE record

CVSS 3.3 Low

communication_dsoftbus has a missing release of memory vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 11 Aug 2025
CVE-2025-27128 CVE record

CVSS 8.4 High

liteos_a has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 11 Aug 2025
CVE-2025-25212 CVE record

CVSS 3.3 Low

pasteboard has an improper input vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 11 Aug 2025
CVE-2025-24844 CVE record

CVSS 3.3 Low

communication_dsoftbus has a missing release of memory vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 11 Aug 2025
CVE-2025-27536 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has a type confusion vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 11 Aug 2025
CVE-2025-26690 CVE record

CVSS 3.3 Low

communication dsoftbus has a NULL pointer vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 11 Aug 2025
CVE-2025-24925 CVE record

CVSS 3.3 Low

applications_settings has a missing release of memory vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 11 Aug 2025
CVE-2025-24298 CVE record

CVSS 8.4 High

liteos_a has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 11 Aug 2025
CVE-2025-25278 CVE record

CVSS 8.4 High

liteos_a has a race condition vulnerability
- OpenHarmony
- Race condition
Not analysed yet 11 Aug 2025
CVE-2025-27577 CVE record

CVSS 8.4 High

liteos_a has a race condition vulnerability
- OpenHarmony
- Race condition
Not analysed yet 11 Aug 2025
CVE-2025-27247 CVE record

CVSS 5.5 Medium

Pasteboard has an improper preservation of permissions vulnerability
- OpenHarmony
- CWE-281
Not analysed yet 8 Jun 2025
CVE-2025-27242 CVE record

CVSS 3.3 Low

Ssecurity_component_manager has an improper input vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 8 Jun 2025
CVE-2025-27563 CVE record

CVSS 3.3 Low

security_access_token has an improper preservation of permissions vulnerability
- OpenHarmony
- CWE-281
Not analysed yet 8 Jun 2025
CVE-2025-26693 CVE record

CVSS 3.3 Low

security_access_token has an improper preservation of permissions vulnerability
- OpenHarmony
- CWE-281
Not analysed yet 8 Jun 2025
CVE-2025-26691 CVE record

CVSS 5.5 Medium

telephony_call_manager has an improper preservation of permissions vulnerability
- OpenHarmony
- CWE-281
Not analysed yet 8 Jun 2025
CVE-2025-27131 CVE record

CVSS 6.1 Medium

kernel_liteos_m has an improper input vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 8 Jun 2025
CVE-2025-24493 CVE record

CVSS 5.5 Medium

kernel_liteos_a has a race condition vulnerability
- OpenHarmony
- Race condition
Not analysed yet 8 Jun 2025
CVE-2025-25217 CVE record

CVSS 3.3 Low

arkui_ace_enginehas a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Jun 2025
CVE-2025-23235 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Jun 2025
CVE-2025-21082 CVE record

CVSS 3.3 Low

arkui_ace_engine has a type confusion vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Jun 2025
CVE-2025-20063 CVE record

CVSS 3.3 Low

arkui_ace_engine has a type confusion vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Jun 2025
CVE-2025-25052 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has a buffer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 6 May 2025
CVE-2025-27241 CVE record

CVSS 3.3 Low

multimedia_av_codec has a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 6 May 2025
CVE-2025-27248 CVE record

CVSS 3.3 Low

ai_neural_network_runtime has a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 6 May 2025
CVE-2025-22886 CVE record

CVSS 3.3 Low

distributeddatamgr_udmf has a memory leak vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 6 May 2025
CVE-2025-27132 CVE record

CVSS 3.8 Low

arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 6 May 2025
CVE-2025-25218 CVE record

CVSS 3.3 Low

third_party_mksh has a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 6 May 2025
CVE-2025-27534 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2025-25057 CVE record

CVSS 3.3 Low

third_party_NuttX has a memory leak vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 7 Apr 2025
CVE-2025-24304 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2025-22851 CVE record

CVSS 6.5 Medium

Liteos_A has an integer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2025-22842 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2025-22452 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2025-20102 CVE record

CVSS 3.3 Low

arkcompiler_ets_runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2025-24309 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-24301 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-23420 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-23418 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-23414 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-23409 CVE record

CVSS 3.8 Low

Communication Dsoftbus has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-23240 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-23234 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has a buffer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-22897 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has a buffer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025