OP
Product
OpenHarmony
by OpenHarmony · last CVE May 19, 2026
170
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 62Medium 93Low 10
Watch

Add OpenHarmony to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-54030
5.5
0%
Jan 7
Communication_dsoftbus has an UAF vulnerability
Affected: v4.1.0 through 4.1.2
CVE-2024-45070
5.5
0%
Jan 7
Liteos_a has an out-of-bounds read vulnerability
Affected: v4.1.0 through 4.1.2
CVE-2024-9978
5.5
0%
Dec 3
Liteos_a has an out-of-bounds read vulnerability
Affected: v4.1.0 through 4.1.1
CVE-2024-12082
5.5
0%
Dec 3
Ability Runtime has an out-of-bounds read permission bypass vulnerability
Affected: v4.0.0 through 4.0.1
CVE-2024-47402
5.5
0%
Nov 5
Liteos_a has an Out-of-bounds Read vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2024-45382
5.5
0%
Oct 8
Liteos_a has an Out-of-bounds Write vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2024-43697
5.5
0%
Oct 8
Liteos_a has an Improper Input Validation vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2024-43696
5.5
0%
Oct 8
Liteos_a has an Memory Leak vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2024-39806
5.5
0%
Oct 8
Liteos_a has an out-of-bounds Read vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2024-39612
5.5
0%
Sep 2
Background Task Manager has an out-of-bounds read permission bypass vulnerability
Affected: v4.0.0 through 4.0.1
CVE-2024-38382
5.5
0%
Sep 2
Ability Runtime has an out-of-bounds read permission bypass vulnerability
Affected: v4.0.0 through 4.0.1
CVE-2024-28044
5.5
0%
Sep 2
Liteos-A has an integer overflow vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2024-3757
5.5
0%
May 7
Arkcompiler runtime has an integer overflow vulnerability
Affected: v4.0.0 before v4.0.1
CVE-2024-31078
5.5
0%
May 7
Bluetooth Service has a use after free vulnerability
Affected: v4.0.0 before v4.0.1
CVE-2024-29086
5.5
0%
Apr 2
Arkcompiler runtime has a stack overflow svulnerability
Affected: v3.2.0 through v3.2.4
CVE-2024-22180
5.5
0%
Apr 2
Camera has a use after free vulnerability
Affected: v3.2.0 through v4.0.0
CVE-2024-22177
5.5
0%
Apr 2
Audio has an improper preservation of permissions vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2024-21834
5.5
0%
Apr 2
Arkui has a type confusion vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2024-21826
5.5
0%
Mar 4
Huks has an insecure storage of sensitive information vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2024-21816
5.5
0%
Mar 4
Background task manager has an improper preservation of permissions vulnerability
Affected: v4.0.0 before v4.0.1
CVE-2023-49602
5.5
0%
Mar 4
Arkui has a type confusion vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2023-25176
5.5
0%
Mar 4
Pasteboard has an out-of-bounds read vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2024-0285
5.5
0%
Feb 2
Dsoftbus has an improper input validation vulnerability
Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1
CVE-2023-49118
5.5
0%
Feb 2
Dsoftbus has an out-of-bounds read vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2023-43756
5.5
0%
Feb 2
Dsoftbus has an out-of-bounds read vulnerability
Affected: v3.2.0 through v3.2.4
CVE-2023-49135
5.5
0%
Jan 2
multimedia player has a UAF vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-48360
5.5
0%
Jan 2
multimedia player has a UAF vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-47857
5.5
0%
Jan 2
multimedia camera has a UAF vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-47216
5.5
0%
Jan 2
Liteos-A has a missing release of resource vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-47217
5.5
0%
Nov 20
Arkruntime has a buffer overflow vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-46100
5.5
0%
Nov 20
Cert manager has a use of uninitialized resource vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-42774
5.5
0%
Nov 20
Liteos-A has a incorrect default permissions vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-46705
5.5
0%
Nov 20
Arkruntime has a type confusion vulnerability
Affected: v3.2.0 through v3.2.2
CVE-2023-4753
5.5
0%
Sep 21
OpenHarmony v3.2.1 and prior version has a system call function usage error
Affected: v3.2.0 through v3.2.1
CVE-2022-45118
5.5
0%
Dec 8
OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set
Affected: 3.1 through 3.1.4
CVE-2022-43449
5.5
0%
Nov 3
Arbitrary file read via download_server.
Affected: 3.1.0
CVE-2022-38081
5.5
0%
Sep 9
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability
Affected: 3.1 through 3.1.2
CVE-2022-38064
5.5
0%
Sep 9
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability
Affected: 3.1 through 3.1.2
CVE-2025-20081
5.3
0%
Mar 4
Communication Dsoftbus has an UAF vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-20024
5.3
0%
Mar 4
Arkcompiler Ets Runtime has an integer overflow vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2022-45877
5.3
0%
Dec 8
OpenHarmony-v3.1.4 and prior versions had an vulnerability
Affected: 3.1 through 3.1.4
CVE-2025-24493
4.7
0%
Jun 8
kernel_liteos_a has a race condition vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2022-41686
4.4
0%
Oct 14
Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...
Affected: OpenHarmony-v3.1.x-Release through 3.1.2; OpenHarmony-v3.0.x-LTS through 3.0.6
Page 2 of 2 · 93 total