OP
Product
OpenHarmony
170
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 62Medium 93Low 10
Watch
Add OpenHarmony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39831 | 6.7 | Oct 8 | AccessTokenManager has an use after free vulnerability Affected: v4.0.0 through 4.1.0 |
| CVE-2026-28733 | 6.5 | May 19 | filemanagement_storage_service has an use after free vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2025-12736 | 6.5 | Mar 16 | multimedia_audio_standard has an insecure storage of sensitive information vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2022-43451 | 6.5 | Nov 3 | Multiple path traversal in appspawn and nwebspawn services. Affected: 3.1.0 |
| CVE-2024-21863 | 6.2 | Feb 2 | Dsoftbus has an improper input validation vulnerability Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1 |
| CVE-2026-27766 | 5.5 | May 19 | multimedia_audio_framework has a Race Condition vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2026-25850 | 5.5 | May 19 | filemanagement_storage_service has an improper preservation of permissions vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2025-6969 | 5.5 | Mar 16 | ability_ability_runtime an improper input validation vulnerability Affected: v5.0.3 through v5.1.0.x |
| CVE-2026-0639 | 5.5 | Mar 16 | liteos_a has a missing release of memory vulnerability Affected: v5.0.3 through v6.0 |
| CVE-2025-27562 | 5.5 | Aug 11 | communication_dsoftbus has a missing release of memory vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-25212 | 5.5 | Aug 11 | pasteboard has an improper input vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-24844 | 5.5 | Aug 11 | communication_dsoftbus has a missing release of memory vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-27536 | 5.5 | Aug 11 | arkcompiler_ets_runtime has a type confusion vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-26690 | 5.5 | Aug 11 | communication dsoftbus has a NULL pointer vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-24925 | 5.5 | Aug 11 | applications_settings has a missing release of memory vulnerability Affected: v5.0.3 through v5.0.3.x |
| CVE-2025-27247 | 5.5 | Jun 8 | Pasteboard has an improper preservation of permissions vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-27242 | 5.5 | Jun 8 | Ssecurity_component_manager has an improper input vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-27563 | 5.5 | Jun 8 | security_access_token has an improper preservation of permissions vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-26693 | 5.5 | Jun 8 | security_access_token has an improper preservation of permissions vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-26691 | 5.5 | Jun 8 | telephony_call_manager has an improper preservation of permissions vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-27131 | 5.5 | Jun 8 | kernel_liteos_m has an improper input vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-25217 | 5.5 | Jun 8 | arkui_ace_enginehas a NULL pointer dereference vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-23235 | 5.5 | Jun 8 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-21082 | 5.5 | Jun 8 | arkui_ace_engine has a type confusion vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-20063 | 5.5 | Jun 8 | arkui_ace_engine has a type confusion vulnerability Affected: v5.0.1 through v5.0.3 |
| CVE-2025-25052 | 5.5 | May 6 | arkcompiler_ets_runtime has a buffer overflow vulnerability Affected: v4.1.0 through v5.0.3 |
| CVE-2025-27241 | 5.5 | May 6 | multimedia_av_codec has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.3 |
| CVE-2025-27248 | 5.5 | May 6 | ai_neural_network_runtime has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.3 |
| CVE-2025-22886 | 5.5 | May 6 | distributeddatamgr_udmf has a memory leak vulnerability Affected: v4.1.0 through v5.0.3 |
| CVE-2025-25218 | 5.5 | May 6 | third_party_mksh has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.3 |
| CVE-2025-27534 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-25057 | 5.5 | Apr 7 | third_party_NuttX has a memory leak vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-24304 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds write vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22842 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22452 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20102 | 5.5 | Apr 7 | arkcompiler_ets_runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23418 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-23234 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a buffer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22897 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a buffer overflow vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22847 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22841 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22837 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-22443 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21098 | 5.5 | Mar 4 | Liteos-A has an insecure storage of sensitive information vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21097 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-21089 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20042 | 5.5 | Mar 4 | Liteos-A has an out of bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20021 | 5.5 | Mar 4 | Arkcompiler Ets Runtime has an out-of-bounds read vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-20011 | 5.5 | Mar 4 | Communication Dsoftbus has a memory leak vulnerability Affected: v4.1.0 through v5.0.2 |
| CVE-2025-0302 | 5.5 | Feb 7 | Liteos_a has an integer overflow read vulnerability Affected: v4.1.0 through 4.1.2 |
