Advisories · Technology

OpenHarmony.

Every CVE that names OpenHarmony among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-22847 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-22841 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-22837 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-22835 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-22443 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-21098 CVE record

CVSS 5.5 Medium

Liteos-A has an insecure storage of sensitive information vulnerability
- OpenHarmony
- Information disclosure
Not analysed yet 4 Mar 2025
CVE-2025-21097 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-21089 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-21084 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20626 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20091 CVE record

CVSS 3.8 Low

Communication Dsoftbus has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20081 CVE record

CVSS 3.8 Low

Communication Dsoftbus has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20042 CVE record

CVSS 5.5 Medium

Liteos-A has an out of bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20024 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an integer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20021 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-20011 CVE record

CVSS 3.3 Low

Communication Dsoftbus has a memory leak vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 4 Mar 2025
CVE-2025-0587 CVE record

CVSS 3.8 Low

Arkcompiler Ets Runtime has an integer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-0304 CVE record

CVSS 8.8 High

Liteos_a has an use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Feb 2025
CVE-2025-0303 CVE record

CVSS 8.8 High

Liteos_a has a buffer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Feb 2025
CVE-2025-0302 CVE record

CVSS 5.5 Medium

Liteos_a has an integer overflow read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Feb 2025
CVE-2024-54030 CVE record

CVSS 4.4 Medium

Communication_dsoftbus has an UAF vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Jan 2025
CVE-2024-47398 CVE record

CVSS 8.8 High

Liteos_a has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Jan 2025
CVE-2024-45070 CVE record

CVSS 5.5 Medium

Liteos_a has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 Jan 2025
CVE-2024-9978 CVE record

CVSS 5.5 Medium

Liteos_a has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 3 Dec 2024
CVE-2024-12082 CVE record

CVSS 5.5 Medium

Ability Runtime has an out-of-bounds read permission bypass vulnerability
- OpenHarmony
- Memory corruption
- Information disclosure
Not analysed yet 3 Dec 2024
CVE-2024-10074 CVE record

CVSS 8.8 High

Liteos_a has an use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 3 Dec 2024
CVE-2024-47402 CVE record

CVSS 3.3 Low

Liteos_a has an Out-of-bounds Read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 5 Nov 2024
CVE-2024-47137 CVE record

CVSS 8.4 High

Liteos_a has an out-of-bounds Write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 5 Nov 2024
CVE-2024-47404 CVE record

CVSS 8.4 High

Liteos_a has a double free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 5 Nov 2024
CVE-2024-47797 CVE record

CVSS 8.4 High

Liteos_a has an out-of-bounds Write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 5 Nov 2024
CVE-2024-45382 CVE record

CVSS 3.3 Low

Liteos_a has an Out-of-bounds Write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43697 CVE record

CVSS 3.3 Low

Liteos_a has an Improper Input Validation vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43696 CVE record

CVSS 3.3 Low

Liteos_a has an Memory Leak vulnerability
- OpenHarmony
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-39831 CVE record

CVSS 4.4 Medium

AccessTokenManager has an use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-39806 CVE record

CVSS 5.5 Medium

Liteos_a has an out-of-bounds Read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-41160 CVE record

CVSS 8.8 High

Liteos-A has an use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Sept 2024
CVE-2024-41157 CVE record

CVSS 8.8 High

Liteos-A has an use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Sept 2024
CVE-2024-39816 CVE record

CVSS 8.4 High

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Sept 2024
CVE-2024-39775 CVE record

CVSS 6.5 Medium

Net Manager has an out-of-bounds read permission bypass vulnerability
- OpenHarmony
- Memory corruption
- Information disclosure
Not analysed yet 2 Sept 2024
CVE-2024-39612 CVE record

CVSS 5.5 Medium

Background Task Manager has an out-of-bounds read permission bypass vulnerability
- OpenHarmony
- Memory corruption
- Information disclosure
Not analysed yet 2 Sept 2024
CVE-2024-38386 CVE record

CVSS 8.4 High

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Sept 2024
CVE-2024-38382 CVE record

CVSS 5.5 Medium

Ability Runtime has an out-of-bounds read permission bypass vulnerability
- OpenHarmony
- Memory corruption
- Information disclosure
Not analysed yet 2 Sept 2024
CVE-2024-28044 CVE record

CVSS 3.3 Low

Liteos-A has an integer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Sept 2024
CVE-2024-37077 CVE record

CVSS 8.2 High

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-37185 CVE record

CVSS 8.2 High

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-36260 CVE record

CVSS 8.2 High

Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-36278 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has a type confusion vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-36243 CVE record

CVSS 8.2 High

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-37030 CVE record

CVSS 8.2 High

Arkcompiler Ets Runtime has a use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-31071 CVE record

CVSS 3.3 Low

Arkcompiler Ets Runtime has a type confusion vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Jul 2024
CVE-2024-3759 CVE record

CVSS 6.5 Medium

Hmdfs has a use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 May 2024
CVE-2024-3758 CVE record

CVSS 6.5 Medium

Hmdfs has a heap buffer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 May 2024
CVE-2024-3757 CVE record

CVSS 3.3 Low

Arkcompiler runtime has an integer overflow vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 May 2024
CVE-2024-31078 CVE record

CVSS 3.3 Low

Bluetooth Service has a use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 May 2024
CVE-2024-23808 CVE record

CVSS 5.2 Medium

Arkcompiler ets frontend has an out-of-bounds read vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 May 2024
CVE-2024-27217 CVE record

CVSS 6.5 Medium

MSDP has a use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 7 May 2024
CVE-2024-29086 CVE record

CVSS 3.3 Low

Arkcompiler runtime has a stack overflow svulnerability
- OpenHarmony
- Denial of service
Not analysed yet 2 Apr 2024
CVE-2024-28951 CVE record

CVSS 5.5 Medium

Arkcompiler runtime has a use after free vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Apr 2024
CVE-2024-28226 CVE record

CVSS 8.1 High

Fs has an improper input validation vulnerability
- OpenHarmony
- CWE-20
Not analysed yet 2 Apr 2024
CVE-2024-24581 CVE record

CVSS 6.5 Medium

Arkcompiler runtime has an out-of-bounds write vulnerability
- OpenHarmony
- Memory corruption
Not analysed yet 2 Apr 2024