27 matches found
CVE-2023-45734
in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write...
EUVD-2024-36411
Malicious code in bioql PyPI...
EUVD-2024-42434
Malicious code in bioql PyPI...
EUVD-2024-42287
Malicious code in bioql PyPI...
EUVD-2024-19428
Malicious code in bioql PyPI...
EUVD-2024-21985
Malicious code in bioql PyPI...
EUVD-2025-1592
Malicious code in bioql PyPI...
EUVD-2025-10034
Malicious code in bioql PyPI...
EUVD-2025-13490
Malicious code in bioql PyPI...
EUVD-2025-13491
Malicious code in bioql PyPI...
EUVD-2025-10048
Malicious code in bioql PyPI...
CVE-2025-26693
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission...
CVE-2025-27563
OpenHarmony vulnerability CVE-2025-27563 affects OpenHarmony v5.0.3 and earlier. A local attacker can cause information leakage due to improper preservation of permissions when accessing the get permission. The issue is explicitly described across multiple sources as a local information leak with...
CVE-2024-43696
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak...
CVE-2024-21863
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input...
CVE-2024-3758
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow...
CVE-2024-9978
in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read...
CVE-2025-25218
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...
CVE-2025-22851
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow...
CVE-2025-20102
CVE-2025-20102 affects OpenHarmony v5.0.2 and earlier, where a local attacker can trigger a denial of service via an out-of-bounds read in the component responsible for memory handling. The available connected documents consistently describe the vulnerability as a local DOS caused by an out-of-bo...