OP
Product
OpenHarmony
170
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 62Medium 93Low 10
Watch
Add OpenHarmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54030 | 5.5 | Jan 7 | Communication_dsoftbus has an UAF vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-45070 | 5.5 | Jan 7 | Liteos_a has an out-of-bounds read vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-9978 | 5.5 | Dec 3 | Liteos_a has an out-of-bounds read vulnerability Affected: v4.1.0 through 4.1.1 |
| CVE-2024-12082 | 5.5 | Dec 3 | Ability Runtime has an out-of-bounds read permission bypass vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-47402 | 5.5 | Nov 5 | Liteos_a has an Out-of-bounds Read vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-45382 | 5.5 | Oct 8 | Liteos_a has an Out-of-bounds Write vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-43697 | 5.5 | Oct 8 | Liteos_a has an Improper Input Validation vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-43696 | 5.5 | Oct 8 | Liteos_a has an Memory Leak vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-39806 | 5.5 | Oct 8 | Liteos_a has an out-of-bounds Read vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-39612 | 5.5 | Sep 2 | Background Task Manager has an out-of-bounds read permission bypass vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-38382 | 5.5 | Sep 2 | Ability Runtime has an out-of-bounds read permission bypass vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-28044 | 5.5 | Sep 2 | Liteos-A has an integer overflow vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-3757 | 5.5 | May 7 | Arkcompiler runtime has an integer overflow vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-31078 | 5.5 | May 7 | Bluetooth Service has a use after free vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-29086 | 5.5 | Apr 2 | Arkcompiler runtime has a stack overflow svulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-22180 | 5.5 | Apr 2 | Camera has a use after free vulnerability Affected: v3.2.0 through v4.0.0 |
| CVE-2024-22177 | 5.5 | Apr 2 | Audio has an improper preservation of permissions vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21834 | 5.5 | Apr 2 | Arkui has a type confusion vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21826 | 5.5 | Mar 4 | Huks has an insecure storage of sensitive information vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21816 | 5.5 | Mar 4 | Background task manager has an improper preservation of permissions vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2023-49602 | 5.5 | Mar 4 | Arkui has a type confusion vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-25176 | 5.5 | Mar 4 | Pasteboard has an out-of-bounds read vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-0285 | 5.5 | Feb 2 | Dsoftbus has an improper input validation vulnerability Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1 |
| CVE-2023-49118 | 5.5 | Feb 2 | Dsoftbus has an out-of-bounds read vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-43756 | 5.5 | Feb 2 | Dsoftbus has an out-of-bounds read vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-49135 | 5.5 | Jan 2 | multimedia player has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-48360 | 5.5 | Jan 2 | multimedia player has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-47857 | 5.5 | Jan 2 | multimedia camera has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-47216 | 5.5 | Jan 2 | Liteos-A has a missing release of resource vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-47217 | 5.5 | Nov 20 | Arkruntime has a buffer overflow vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-46100 | 5.5 | Nov 20 | Cert manager has a use of uninitialized resource vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-42774 | 5.5 | Nov 20 | Liteos-A has a incorrect default permissions vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-46705 | 5.5 | Nov 20 | Arkruntime has a type confusion vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-4753 | 5.5 | Sep 21 | OpenHarmony v3.2.1 and prior version has a system call function usage error Affected: v3.2.0 through v3.2.1 |
| CVE-2022-45118 | 5.5 | Dec 8 | OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set Affected: 3.1 through 3.1.4 |
| CVE-2022-43449 | 5.5 | Nov 3 | Arbitrary file read via download_server. Affected: 3.1.0 |
| CVE-2022-38081 | 5.5 | Sep 9 | OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability Affected: 3.1 through 3.1.2 |
| CVE-2022-38064 | 5.5 | Sep 9 | OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability Affected: 3.1 through 3.1.2 |
| CVE-2025-20081 | 5.3 | Mar 4 | Communication Dsoftbus has an UAF vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20024 | 5.3 | Mar 4 | Arkcompiler Ets Runtime has an integer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2022-45877 | 5.3 | Dec 8 | OpenHarmony-v3.1.4 and prior versions had an vulnerability Affected: 3.1 through 3.1.4 |
| CVE-2025-24493 | 4.7 | Jun 8 | kernel_liteos_a has a race condition vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2022-41686 | 4.4 | Oct 14 | Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ... Affected: OpenHarmony-v3.1.x-Release through 3.1.2; OpenHarmony-v3.0.x-LTS through 3.0.6 |
