Dsoftbus has an integer overflow vulnerability

Arkruntime has a type confusion vulnerability

Hiview has an improper preservation of permissions vulnerability

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation

Kernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...

Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.

Net Manager has an out-of-bounds read permission bypass vulnerability

Fs has an improper input validation vulnerability

An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

Bundlemanager has an authentication bypass vulnerability

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing

Liteos-A has a incorrect default permissions vulnerability

arkcompiler_ets_runtime has a type confusion vulnerability

liteos_a has a race condition vulnerability

liteos_a has a race condition vulnerability

AccessTokenManager has an use after free vulnerability

filemanagement_storage_service has an use after free vulnerability

multimedia_audio_standard has an insecure storage of sensitive information vulnerability

Multiple path traversal in appspawn and nwebspawn services.

Dsoftbus has an improper input validation vulnerability

multimedia_audio_framework has a Race Condition vulnerability

filemanagement_storage_service has an improper preservation of permissions vulnerability

ability_ability_runtime an improper input validation vulnerability

liteos_a has a missing release of memory vulnerability

communication_dsoftbus has a missing release of memory vulnerability

pasteboard has an improper input vulnerability

communication_dsoftbus has a missing release of memory vulnerability

arkcompiler_ets_runtime has a type confusion vulnerability

communication dsoftbus has a NULL pointer vulnerability

applications_settings has a missing release of memory vulnerability

Pasteboard has an improper preservation of permissions vulnerability

Ssecurity_component_manager has an improper input vulnerability

security_access_token has an improper preservation of permissions vulnerability

security_access_token has an improper preservation of permissions vulnerability

telephony_call_manager has an improper preservation of permissions vulnerability

kernel_liteos_m has an improper input vulnerability

arkui_ace_enginehas a NULL pointer dereference vulnerability

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

arkui_ace_engine has a type confusion vulnerability

arkui_ace_engine has a type confusion vulnerability

arkcompiler_ets_runtime has a buffer overflow vulnerability

multimedia_av_codec has a NULL pointer dereference vulnerability

ai_neural_network_runtime has a NULL pointer dereference vulnerability

distributeddatamgr_udmf has a memory leak vulnerability

third_party_mksh has a NULL pointer dereference vulnerability

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

third_party_NuttX has a memory leak vulnerability

arkcompiler_ets_runtime has an out-of-bounds write vulnerability