Skip to content
OpenAdvisories

Vendor

OpenHarmony

177 known vulnerabilities.

Products

177 results · Feed

  • Low 3.3

    ai_neural_network_runtime has a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • Low 3.3

    distributeddatamgr_udmf has a memory leak vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

  • Low 3.8

    arkcompiler_ets_runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    third_party_mksh has a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • Low 3.3

    arkcompiler_ets_runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

  • Low 3.3

    third_party_NuttX has a memory leak vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

  • Low 3.3

    arkcompiler_ets_runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.

  • Medium 6.5

    Liteos_A has an integer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.

  • Low 3.3

    arkcompiler_ets_runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    arkcompiler_ets_runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    arkcompiler_ets_runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.8

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Arkcompiler Ets Runtime has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.8

    Arkcompiler Ets Runtime has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Communication Dsoftbus has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Arkcompiler Ets Runtime has a buffer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

  • Low 3.3

    Arkcompiler Ets Runtime has a buffer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

  • Low 3.8

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Medium 5.5

    Liteos-A has an insecure storage of sensitive information vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.

  • Low 3.3

    Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.8

    Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Arkcompiler Ets Runtime has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Communication Dsoftbus has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.8

    Communication Dsoftbus has an UAF vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • Medium 5.5

    Liteos-A has an out of bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.

  • Low 3.8

    Arkcompiler Ets Runtime has an integer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

  • Low 3.3

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3

    Communication Dsoftbus has a memory leak vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

  • Low 3.8

    Arkcompiler Ets Runtime has an integer overflow vulnerability

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

  • High 8.8

    Liteos_a has an use after free vulnerability

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

  • High 8.8

    Liteos_a has a buffer overflow vulnerability

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.

  • Medium 5.5

    Liteos_a has an integer overflow read vulnerability

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.