13 matches found
CVE-2025-6969
OpenHarmony
CVE-2026-0639 liteos_a has a missing release of memory vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory...
EUVD-2025-24110
Malicious code in bioql PyPI...
CVE-2024-47402
CVE-2024-47402 relates to OpenHarmony v4.0.0 and earlier, where a local attacker can cause a denial of service via an out-of-bounds read. The impact is described as DOS with local access; the exact vulnerable component is not explicitly identified in the provided documents. Mitigation appears to ...
CVE-2024-43697
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input...
CVE-2024-28044
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow...
CVE-2024-28044
Summary of CVE-2024-28044 : OpenHarmony (prior to v4.1.0) is affected by an integer overflow in LiteOS-A that allows a local attacker to cause a crash. The issue is described as a local vulnerability with a low attack complexity and requires LOW privileges with no user interaction, leading to ava...
CVE-2024-31071
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion...
CVE-2024-3759
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free...
CVE-2024-29086
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow...
CVE-2024-22098
OpenHarmony: CVE-2024-22098 is a local-use-after-free vulnerability in AVSession that allows arbitrary code execution in any app on OpenHarmony v3.2.4 and older. The root cause is use-after-free; impact is local and high (per CVSS, high for confidentiality, integrity, availability). No exploit de...
CVE-2022-44455
The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the...