OP
Product
Openharmony
156
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 58Medium 87Low 6
Watch
Add Openharmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22851 | 8.8 | Apr 7 | Liteos_A has an integer overflow vulnerability Affected: through 5.0.2 |
| CVE-2024-47398 | 8.8 | Jan 7 | Liteos_a has an out-of-bounds write vulnerability Affected: through 4.1.2 |
| CVE-2024-29074 | 8.8 | Apr 2 | Telephony has an improper input validation vulnerability Affected: through 3.2.4 |
| CVE-2024-22098 | 8.8 | Apr 2 | AVSession has a use after free vulnerability Affected: through 3.2.4 |
| CVE-2023-45734 | 8.8 | Feb 2 | Dsoftbus has an out-of-bounds write vulnerability Affected: 3.2.0 through 3.2.4 |
| CVE-2024-21860 | 8.8 | Feb 2 | Dsoftbus has a use after free vulnerability Affected: 3.2.0 through 3.2.4; 4.0 |
| CVE-2025-52458 | 7.8 | Mar 16 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: 5.0.3; 5.1.0 |
| CVE-2025-41432 | 7.8 | Mar 16 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: 5.0.3; 5.1.0 |
| CVE-2025-27128 | 7.8 | Aug 11 | liteos_a has an UAF vulnerability Affected: through 5.0.3 |
| CVE-2025-24298 | 7.8 | Aug 11 | liteos_a has an UAF vulnerability Affected: through 5.0.3 |
| CVE-2025-27132 | 7.8 | May 6 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: through 5.0.3 |
| CVE-2025-24309 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-24301 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an UAF vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-23420 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-23414 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an UAF vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-23409 | 7.8 | Mar 4 | Communication Dsoftbus has an UAF vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-23240 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-22835 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-21084 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-20626 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an UAF vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-20091 | 7.8 | Mar 4 | Communication Dsoftbus has an UAF vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-0587 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an integer overflow vulnerability Affected: 4.1 through 5.0.2 |
| CVE-2025-0304 | 7.8 | Feb 7 | Liteos_a has an use after free vulnerability Affected: 4.1.0 through 4.1.2 |
| CVE-2025-0303 | 7.8 | Feb 7 | Liteos_a has a buffer overflow vulnerability Affected: 4.1.0 through 4.1.2 |
| CVE-2024-10074 | 7.8 | Dec 3 | Liteos_a has an use after free vulnerability Affected: through 4.1.1 |
| CVE-2024-47137 | 7.8 | Nov 5 | Liteos_a has an out-of-bounds Write vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-47404 | 7.8 | Nov 5 | Liteos_a has a double free vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-47797 | 7.8 | Nov 5 | Liteos_a has an out-of-bounds Write vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-41160 | 7.8 | Sep 2 | Liteos-A has an use after free vulnerability Affected: through 4.1.0 |
| CVE-2024-41157 | 7.8 | Sep 2 | Liteos-A has an use after free vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-39816 | 7.8 | Sep 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-38386 | 7.8 | Sep 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: 4.0 through 4.1 |
| CVE-2024-3759 | 7.8 | May 7 | Hmdfs has a use after free vulnerability Affected: before 4.0.1 |
| CVE-2024-3758 | 7.8 | May 7 | Hmdfs has a heap buffer overflow vulnerability Affected: before 4.0.1 |
| CVE-2024-23808 | 7.8 | May 7 | Arkcompiler ets frontend has an out-of-bounds read vulnerability Affected: before 4.0.1 |
| CVE-2024-27217 | 7.8 | May 7 | MSDP has a use after free vulnerability Affected: before 4.0.1 |
| CVE-2024-28951 | 7.8 | Apr 2 | Arkcompiler runtime has a use after free vulnerability Affected: 4.0 |
| CVE-2024-24581 | 7.8 | Apr 2 | Arkcompiler runtime has an out-of-bounds write vulnerability Affected: 3.2 through 4.0 |
| CVE-2023-46708 | 7.8 | Mar 4 | Wlan has a use after free vulnerability Affected: 3.2 through 3.2.4 |
| CVE-2024-21851 | 7.8 | Feb 2 | Dsoftbus has an integer overflow vulnerability Affected: 3.2.0 through 3.2.4; 4.0 |
| CVE-2024-21845 | 7.8 | Feb 2 | Dsoftbus has an integer overflow vulnerability Affected: 3.2.0 through 3.2.4; 4.0 |
| CVE-2023-6045 | 7.8 | Nov 20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion Affected: through 3.2.2 |
| CVE-2023-43612 | 7.8 | Nov 20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions Affected: through 3.2.2 |
| CVE-2023-22436 | 7.8 | Mar 10 | The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this… Affected: 3.1 through 3.1.5 |
| CVE-2023-0036 | 7.8 | Jan 9 | platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers… Affected: 3.0 through 3.0.5 |
| CVE-2023-0035 | 7.8 | Jan 9 | softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local… Affected: 3.0 through 3.0.5 |
| CVE-2022-45126 | 7.8 | Jan 9 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime Affected: 1.1.0 through 1.1.5; 3.0 through 3.0.6 |
| CVE-2022-43662 | 7.8 | Jan 9 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime Affected: 1.1.0 through 1.1.5; 3.0 through 3.0.6 |
| CVE-2022-44455 | 7.8 | Dec 8 | The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation Affected: 3.0 through 3.0.6 |
| CVE-2024-39775 | 7.5 | Sep 2 | Net Manager has an out-of-bounds read permission bypass vulnerability Affected: 4.0 through 4.1 |