OP
Product
OpenHarmony
170
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 62Medium 93Low 10
Watch
Add OpenHarmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22842 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22452 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20102 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23418 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23234 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a buffer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22897 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a buffer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22847 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22841 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22837 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22443 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21098 | 5.5 | Mar 4 | Liteos-A has an insecure storage of sensitive information vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21097 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21089 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20042 | 5.5 | Mar 4 | Liteos-A has an out of bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20021 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20011 | 5.5 | Mar 4 | Communication Dsoftbus has a memory leak vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-0302 | 5.5 | Feb 7 | Liteos_a has an integer overflow read vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-54030 | 5.5 | Jan 7 | Communication_dsoftbus has an UAF vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-45070 | 5.5 | Jan 7 | Liteos_a has an out-of-bounds read vulnerability Affected: v4.1.0 through 4.1.2 |
| CVE-2024-9978 | 5.5 | Dec 3 | Liteos_a has an out-of-bounds read vulnerability Affected: v4.1.0 through 4.1.1 |
| CVE-2024-12082 | 5.5 | Dec 3 | Ability Runtime has an out-of-bounds read permission bypass vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-47402 | 5.5 | Nov 5 | Liteos_a has an Out-of-bounds Read vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-45382 | 5.5 | Oct 8 | Liteos_a has an Out-of-bounds Write vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-43697 | 5.5 | Oct 8 | Liteos_a has an Improper Input Validation vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-43696 | 5.5 | Oct 8 | Liteos_a has an Memory Leak vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-39806 | 5.5 | Oct 8 | Liteos_a has an out-of-bounds Read vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-39612 | 5.5 | Sep 2 | Background Task Manager has an out-of-bounds read permission bypass vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-38382 | 5.5 | Sep 2 | Ability Runtime has an out-of-bounds read permission bypass vulnerability Affected: v4.0.0 through 4.0.1 |
| CVE-2024-28044 | 5.5 | Sep 2 | Liteos-A has an integer overflow vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2024-3757 | 5.5 | May 7 | Arkcompiler runtime has an integer overflow vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-31078 | 5.5 | May 7 | Bluetooth Service has a use after free vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2024-29086 | 5.5 | Apr 2 | Arkcompiler runtime has a stack overflow svulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-22180 | 5.5 | Apr 2 | Camera has a use after free vulnerability Affected: v3.2.0 through v4.0.0 |
| CVE-2024-22177 | 5.5 | Apr 2 | Audio has an improper preservation of permissions vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21834 | 5.5 | Apr 2 | Arkui has a type confusion vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21826 | 5.5 | Mar 4 | Huks has an insecure storage of sensitive information vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-21816 | 5.5 | Mar 4 | Background task manager has an improper preservation of permissions vulnerability Affected: v4.0.0 before v4.0.1 |
| CVE-2023-49602 | 5.5 | Mar 4 | Arkui has a type confusion vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-25176 | 5.5 | Mar 4 | Pasteboard has an out-of-bounds read vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2024-0285 | 5.5 | Feb 2 | Dsoftbus has an improper input validation vulnerability Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1 |
| CVE-2023-49118 | 5.5 | Feb 2 | Dsoftbus has an out-of-bounds read vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-43756 | 5.5 | Feb 2 | Dsoftbus has an out-of-bounds read vulnerability Affected: v3.2.0 through v3.2.4 |
| CVE-2023-49135 | 5.5 | Jan 2 | multimedia player has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-48360 | 5.5 | Jan 2 | multimedia player has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-47857 | 5.5 | Jan 2 | multimedia camera has a UAF vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-47216 | 5.5 | Jan 2 | Liteos-A has a missing release of resource vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-47217 | 5.5 | Nov 20 | Arkruntime has a buffer overflow vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-46100 | 5.5 | Nov 20 | Cert manager has a use of uninitialized resource vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-42774 | 5.5 | Nov 20 | Liteos-A has a incorrect default permissions vulnerability Affected: v3.2.0 through v3.2.2 |
| CVE-2023-46705 | 5.5 | Nov 20 | Arkruntime has a type confusion vulnerability Affected: v3.2.0 through v3.2.2 |