Skip to content
OpenAdvisories

Vendor

OpenHarmony

177 known vulnerabilities.

Products

177 results · Feed

  • Medium 4.4

    Communication_dsoftbus has an UAF vulnerability

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free.

  • High 8.8

    Liteos_a has an out-of-bounds write vulnerability

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.

  • Medium 5.5

    Liteos_a has an out-of-bounds read vulnerability

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • Medium 5.5

    Liteos_a has an out-of-bounds read vulnerability

    in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • Medium 5.5

    Ability Runtime has an out-of-bounds read permission bypass vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • High 8.8

    Liteos_a has an use after free vulnerability

    in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.

  • Low 3.3

    Liteos_a has an Out-of-bounds Read vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • High 8.4

    Liteos_a has an out-of-bounds Write vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.

  • High 8.4

    Liteos_a has a double free vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free.

  • High 8.4

    Liteos_a has an out-of-bounds Write vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.

  • Low 3.3

    Liteos_a has an Out-of-bounds Write vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.

  • Low 3.3

    Liteos_a has an Improper Input Validation vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.

  • Low 3.3

    Liteos_a has an Memory Leak vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak.

  • Medium 4.4

    AccessTokenManager has an use after free vulnerability

    in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.

  • Medium 5.5

    Liteos_a has an out-of-bounds Read vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • High 8.8

    Liteos-A has an use after free vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

  • High 8.8

    Liteos-A has an use after free vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

  • High 8.4

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

  • Medium 6.5

    Net Manager has an out-of-bounds read permission bypass vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a remote attacker cause information leak through out-of-bounds Read.

  • Medium 5.5

    Background Task Manager has an out-of-bounds read permission bypass vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • High 8.4

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

  • Medium 5.5

    Ability Runtime has an out-of-bounds read permission bypass vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • Low 3.3

    Liteos-A has an integer overflow vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow.

  • High 8.2

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

  • High 8.2

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

  • High 8.2

    Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

  • Low 3.3

    Arkcompiler Ets Runtime has a type confusion vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  • High 8.2

    Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.

  • High 8.2

    Arkcompiler Ets Runtime has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.

  • Low 3.3

    Arkcompiler Ets Runtime has a type confusion vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  • Medium 6.5

    Hmdfs has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.

  • Medium 6.5

    Hmdfs has a heap buffer overflow vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.

  • Low 3.3

    Arkcompiler runtime has an integer overflow vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

  • Low 3.3

    Bluetooth Service has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.

  • Medium 5.2

    Arkcompiler ets frontend has an out-of-bounds read vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.

  • Medium 6.5

    MSDP has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

  • Low 3.3

    Arkcompiler runtime has a stack overflow svulnerability

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

  • Medium 5.5

    Arkcompiler runtime has a use after free vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

  • High 8.1

    Fs has an improper input validation vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.

  • Medium 6.5

    Arkcompiler runtime has an out-of-bounds write vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write.