OpenHarmony v3.2.1 and prior version has a system call function usage error

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set

Arbitrary file read via download_server.

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability

Communication Dsoftbus has an UAF vulnerability

Arkcompiler Ets Runtime has an integer overflow vulnerability

OpenHarmony-v3.1.4 and prior versions had an vulnerability

kernel_liteos_a has a race condition vulnerability

Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...

kernel_linux_common_modules has a Race Condition vulnerability

filemanagement_storage_service has an improper input validation vulnerability

kernel_liteos_a has an integer overflow vulnerability

Sensors_medical_sensor has a NULL pointer dereference vulnerability

communication_ipc an improper input validation vulnerability

Arkcompiler Ets Runtime has a type confusion vulnerability

Arkcompiler Ets Runtime has a type confusion vulnerability

multimedia audio has a UAF vulnerability

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability