Skip to content
OpenAdvisories

Vendor

OpenHarmony

177 known vulnerabilities.

Products

76 results · Clear filters · Feed

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

  • Low 3.8

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.8

    Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Arkcompiler Ets Runtime has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Communication Dsoftbus has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Communication Dsoftbus has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Arkcompiler Ets Runtime has an integer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Communication Dsoftbus has a memory leak vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

  • Low 3.8

    Arkcompiler Ets Runtime has an integer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Liteos_a has an Out-of-bounds Read vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Liteos_a has an Out-of-bounds Write vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.

  • Low 3.3

    Liteos_a has an Improper Input Validation vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.

  • Low 3.3

    Liteos_a has an Memory Leak vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak.

  • Low 3.3

    Liteos-A has an integer overflow vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow.

  • Low 3.3

    Arkcompiler Ets Runtime has a type confusion vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  • Low 3.3

    Arkcompiler Ets Runtime has a type confusion vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  • Low 3.3

    Arkcompiler runtime has an integer overflow vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

  • Low 3.3

    Bluetooth Service has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.

  • Low 3.3

    Arkcompiler runtime has a stack overflow svulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

  • Low 3.3

    Camera has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free.

  • Low 3.3

    Audio has an improper preservation of permissions vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission.

  • Low 3.3

    Arkui has a type confusion vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

  • Low 2.9

    Arkui has a type confusion vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

  • Low 2.9

    Pasteboard has an out-of-bounds read vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • Low 2.9

    Dsoftbus has an integer overflow vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

  • Low 2.9

    Dsoftbus has an integer overflow vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

  • Low 2.9

    Dsoftbus has an out-of-bounds read vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.

  • Low 2.9

    Dsoftbus has an out-of-bounds read vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.

  • Low 2.9

    Liteos-A has a missing release of resource vulnerability

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources

  • Low 3.9

    OpenHarmony v3.2.1 and prior version has a system call function usage error

    OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the error input.