OP
Product
Openharmony
156
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 58Medium 87Low 6
Watch
Add Openharmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39831 | 6.7 | Oct 8 | AccessTokenManager has an use after free vulnerability Affected: through 4.1.0 |
| CVE-2025-12736 | 6.5 | Mar 16 | multimedia_audio_standard has an insecure storage of sensitive information vulnerability Affected: 5.0.3 |
| CVE-2024-21863 | 6.2 | Feb 2 | Dsoftbus has an improper input validation vulnerability Affected: 3.2.0 through 3.2.4; 4.0 |
| CVE-2025-6969 | 5.5 | Mar 16 | ability_ability_runtime an improper input validation vulnerability Affected: 5.0.3; 5.1.0 |
| CVE-2026-0639 | 5.5 | Mar 16 | liteos_a has a missing release of memory vulnerability Affected: 5.0.3 through 6.0 |
| CVE-2025-27562 | 5.5 | Aug 11 | communication_dsoftbus has a missing release of memory vulnerability Affected: through 5.0.3 |
| CVE-2025-25212 | 5.5 | Aug 11 | pasteboard has an improper input vulnerability Affected: through 5.0.3 |
| CVE-2025-24844 | 5.5 | Aug 11 | communication_dsoftbus has a missing release of memory vulnerability Affected: through 5.0.3 |
| CVE-2025-27536 | 5.5 | Aug 11 | arkcompiler_ets_runtime has a type confusion vulnerability Affected: through 5.0.3 |
| CVE-2025-26690 | 5.5 | Aug 11 | communication dsoftbus has a NULL pointer vulnerability Affected: through 5.0.3 |
| CVE-2025-24925 | 5.5 | Aug 11 | applications_settings has a missing release of memory vulnerability Affected: through 5.0.3 |
| CVE-2025-27247 | 5.5 | Jun 8 | Pasteboard has an improper preservation of permissions vulnerability Affected: through 5.0.3 |
| CVE-2025-27242 | 5.5 | Jun 8 | Ssecurity_component_manager has an improper input vulnerability Affected: through 5.0.3 |
| CVE-2025-27563 | 5.5 | Jun 8 | security_access_token has an improper preservation of permissions vulnerability Affected: through 5.0.3 |
| CVE-2025-26693 | 5.5 | Jun 8 | security_access_token has an improper preservation of permissions vulnerability Affected: through 5.0.3 |
| CVE-2025-26691 | 5.5 | Jun 8 | telephony_call_manager has an improper preservation of permissions vulnerability Affected: through 5.0.3 |
| CVE-2025-27131 | 5.5 | Jun 8 | kernel_liteos_m has an improper input vulnerability Affected: through 5.0.3 |
| CVE-2025-25217 | 5.5 | Jun 8 | arkui_ace_enginehas a NULL pointer dereference vulnerability Affected: through 5.0.3 |
| CVE-2025-23235 | 5.5 | Jun 8 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: through 5.0.3 |
| CVE-2025-21082 | 5.5 | Jun 8 | arkui_ace_engine has a type confusion vulnerability Affected: through 5.0.3 |
| CVE-2025-20063 | 5.5 | Jun 8 | arkui_ace_engine has a type confusion vulnerability Affected: through 5.0.3 |
| CVE-2025-25052 | 5.5 | May 6 | arkcompiler_ets_runtime has a buffer overflow vulnerability Affected: through 4.1; 5.0 through 5.0.3 |
| CVE-2025-27241 | 5.5 | May 6 | multimedia_av_codec has a NULL pointer dereference vulnerability Affected: through 5.0.3 |
| CVE-2025-27248 | 5.5 | May 6 | ai_neural_network_runtime has a NULL pointer dereference vulnerability Affected: through 5.0.3 |
| CVE-2025-22886 | 5.5 | May 6 | distributeddatamgr_udmf has a memory leak vulnerability Affected: through 5.0.3 |
| CVE-2025-25218 | 5.5 | May 6 | third_party_mksh has a NULL pointer dereference vulnerability Affected: through 5.0.3 |
| CVE-2025-27534 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: through 5.0.2 |
| CVE-2025-25057 | 5.5 | Apr 7 | third_party_NuttX has a memory leak vulnerability Affected: through 5.0.2 |
| CVE-2025-24304 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: through 5.0.2 |
| CVE-2025-22842 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: through 5.0.2 |
| CVE-2025-22452 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: through 5.0.2 |
| CVE-2025-20102 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: through 5.0.2 |
| CVE-2025-23418 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-23234 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a buffer overflow vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-22897 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a buffer overflow vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-22847 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-22841 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-22837 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-22443 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-21098 | 5.5 | Mar 4 | Liteos-A has an insecure storage of sensitive information vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-21097 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-21089 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: 4.1.0 through 5.0.2 |
| CVE-2025-20042 | 5.5 | Mar 4 | Liteos-A has an out of bounds read vulnerability Affected: 4.1 through 5.0.2 |
| CVE-2025-20021 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: through 5.0.2 |
| CVE-2025-20011 | 5.5 | Mar 4 | Communication Dsoftbus has a memory leak vulnerability Affected: 4.1 through 5.0.2 |
| CVE-2025-0302 | 5.5 | Feb 7 | Liteos_a has an integer overflow read vulnerability Affected: 4.1.0 through 4.1.2 |
| CVE-2024-54030 | 5.5 | Jan 7 | Communication_dsoftbus has an UAF vulnerability Affected: through 4.1.2 |
| CVE-2024-45070 | 5.5 | Jan 7 | Liteos_a has an out-of-bounds read vulnerability Affected: through 4.1.2 |
| CVE-2024-9978 | 5.5 | Dec 3 | Liteos_a has an out-of-bounds read vulnerability Affected: through 4.1.1 |
| CVE-2024-12082 | 5.5 | Dec 3 | Ability Runtime has an out-of-bounds read permission bypass vulnerability Affected: through 4.0 |