softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime.

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.

The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.

Kernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...

Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.

Net Manager has an out-of-bounds read permission bypass vulnerability

Fs has an improper input validation vulnerability

The kernel subsystem hmdfs has a arbitrary memory accessing vulnerability.

An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

Bundlemanager has an authentication bypass vulnerability

Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

Liteos-A has a incorrect default permissions vulnerability

arkcompiler_ets_runtime has a type confusion vulnerability

liteos_a has a race condition vulnerability

liteos_a has a race condition vulnerability