softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local…

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation

Net Manager has an out-of-bounds read permission bypass vulnerability

Fs has an improper input validation vulnerability

The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerability which network attackers can launch a remote attack to…

Bundlemanager has an authentication bypass vulnerability

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing

Liteos-A has a incorrect default permissions vulnerability

arkcompiler_ets_runtime has a type confusion vulnerability

liteos_a has a race condition vulnerability

liteos_a has a race condition vulnerability

AccessTokenManager has an use after free vulnerability

multimedia_audio_standard has an insecure storage of sensitive information vulnerability

Dsoftbus has an improper input validation vulnerability

ability_ability_runtime an improper input validation vulnerability

liteos_a has a missing release of memory vulnerability

communication_dsoftbus has a missing release of memory vulnerability

pasteboard has an improper input vulnerability

communication_dsoftbus has a missing release of memory vulnerability

arkcompiler_ets_runtime has a type confusion vulnerability

communication dsoftbus has a NULL pointer vulnerability

applications_settings has a missing release of memory vulnerability

Pasteboard has an improper preservation of permissions vulnerability

Ssecurity_component_manager has an improper input vulnerability

security_access_token has an improper preservation of permissions vulnerability

security_access_token has an improper preservation of permissions vulnerability

telephony_call_manager has an improper preservation of permissions vulnerability

kernel_liteos_m has an improper input vulnerability

arkui_ace_enginehas a NULL pointer dereference vulnerability

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

arkui_ace_engine has a type confusion vulnerability

arkui_ace_engine has a type confusion vulnerability

arkcompiler_ets_runtime has a buffer overflow vulnerability

multimedia_av_codec has a NULL pointer dereference vulnerability

ai_neural_network_runtime has a NULL pointer dereference vulnerability

distributeddatamgr_udmf has a memory leak vulnerability

third_party_mksh has a NULL pointer dereference vulnerability

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

third_party_NuttX has a memory leak vulnerability

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has a buffer overflow vulnerability

Arkcompiler Ets Runtime has a buffer overflow vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability