OP
Product
OpenHarmony
162
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 59Medium 88Low 10
Watch
Add OpenHarmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37077 | 9.8 | Jul 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-37185 | 9.8 | Jul 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-36260 | 9.8 | Jul 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-36243 | 9.8 | Jul 2 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-37030 | 9.8 | Jul 2 | Arkcompiler Ets Runtime has a use after free vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2026-27648 | 8.8 | May 19 | web_webview has an out-of-bounds write vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2025-22851 | 8.8 | Apr 7 | Liteos_A has an integer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2024-47398 | 8.8 | Jan 7 | Liteos_a has an out-of-bounds write vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-29074 | 8.8 | Apr 2 | Telephony has an improper input validation vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-22098 | 8.8 | Apr 2 | AVSession has a use after free vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-45734 | 8.8 | Feb 2 | Dsoftbus has an out-of-bounds write vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21860 | 8.8 | Feb 2 | Dsoftbus has a use after free vulnerability Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1 |
| CVE-2022-42463 | 8.8 | Oct 14 | Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ... Affected: OpenHarmony-v3.1.x-Release through 3.1.2 |
| CVE-2022-38700 | 8.8 | Sep 9 | OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability Affected: 3.1.1 |
| CVE-2026-25781 | 8.4 | May 19 | kernel_liteos_a has an out-of-bounds write vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2026-24792 | 8.1 | May 19 | web_webview has a Race Condition vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2025-52458 | 7.8 | Mar 16 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: v5.0.3 through v5.1.0.x |
| CVE-2025-41432 | 7.8 | Mar 16 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: v5.0.3 through v5.1.0.x |
| CVE-2025-27128 | 7.8 | Aug 11 | liteos_a has an UAF vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-24298 | 7.8 | Aug 11 | liteos_a has an UAF vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-27132 | 7.8 | May 6 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: v4.1.0 through v5.0.3 |
| CVE-2025-24309 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-24301 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an UAF vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23420 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23414 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an UAF vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23409 | 7.8 | Mar 4 | Communication Dsoftbus has an UAF vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23240 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22835 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21084 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20626 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an UAF vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20091 | 7.8 | Mar 4 | Communication Dsoftbus has an UAF vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-0587 | 7.8 | Mar 4 | Arkcompiler Ets Runtime has an integer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-0304 | 7.8 | Feb 7 | Liteos_a has an use after free vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2025-0303 | 7.8 | Feb 7 | Liteos_a has a buffer overflow vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-10074 | 7.8 | Dec 3 | Liteos_a has an use after free vulnerability Affected: v4.1.0 through 4.1.1 |
| CVE-2024-47137 | 7.8 | Nov 5 | Liteos_a has an out-of-bounds Write vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-47404 | 7.8 | Nov 5 | Liteos_a has a double free vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-47797 | 7.8 | Nov 5 | Liteos_a has an out-of-bounds Write vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-41160 | 7.8 | Sep 2 | Liteos-A has an use after free vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-41157 | 7.8 | Sep 2 | Liteos-A has an use after free vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-39816 | 7.8 | Sep 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-38386 | 7.8 | Sep 2 | Arkcompiler Ets Runtime has an out-of-bounds write vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-3759 | 7.8 | May 7 | Hmdfs has a use after free vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-3758 | 7.8 | May 7 | Hmdfs has a heap buffer overflow vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-23808 | 7.8 | May 7 | Arkcompiler ets frontend has an out-of-bounds read vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-27217 | 7.8 | May 7 | MSDP has a use after free vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-28951 | 7.8 | Apr 2 | Arkcompiler runtime has a use after free vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-24581 | 7.8 | Apr 2 | Arkcompiler runtime has an out-of-bounds write vulnerability Affected: v3.2.0 through v4.0.0 |
| CVE-2023-46708 | 7.8 | Mar 4 | Wlan has a use after free vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21851 | 7.8 | Feb 2 | Dsoftbus has an integer overflow vulnerability Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1 |