CVE-2024-39775

in OpenHarmony v4.1.0 and prior versions allow a remote attacker cause information leak through out-of-bounds Read...

CVE-2024-39612

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read...

CVE-2024-38386

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.1.0 and earlier versions, which stems from the liteosa kernel use-after-release vulnerability...

PT-2024-27971 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to cause an information leak through an out-of-bounds read. Recommendations: For versions prior to 4.0.0, update to the latest patch to resolve the issue. As a...

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code in a pre-installe...

PT-2024-21749 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to execute arbitrary code in pre-installed apps through use after free. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resol...

PT-2024-27671 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to execute arbitrary code in TCB through a heap buffer overflow. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the...

PT-2024-20094 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to execute arbitrary code in pre-installed apps through use after free or cause a denial of service DOS through a NULL pointer dereference. Recommendations: Fo...

CVE-2024-28226

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...

PT-2024-19260 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 OpenHarmony version 4.0.0 Description: The issue allows a local attacker to cause a denial of service DOS through a use after free exploit. Recommendations: For OpenHarmony versions prior to 4.0.0, update t...

PT-2024-22639 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to execute arbitrary code in pre-installed apps through use after free. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resol...

PT-2024-22700 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to execute arbitrary code in any apps through improper input. Recommendations: For versions prior to 3.2.4, update to a version newer than 3.2.4 to resolve the...

CVE-2024-21826

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage...

CVE-2023-49602

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion...

CVE-2023-25176

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read...

PT-2024-15445 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 OpenHarmony version 4.0.0 Description: The issue allows a local attacker to cause a denial of service DOS through improper input. Recommendations: For OpenHarmony version 4.0.0, update to a version that fix...

CVE-2023-43612

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions...

CVE-2023-22436

The kernel subsystem function checkpermissionforsettokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root...

CVE-2022-45877

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks...