51 matches found
CVE-2024-0285
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input...
CVE-2024-3757
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow...
CVE-2025-27132
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...
CVE-2025-22886 distributeddatamgr_udmf has a memory leak vulnerability
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...
CVE-2025-24304
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write...
CVE-2025-22842
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
CVE-2025-21089
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
CVE-2025-22841
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
CVE-2025-22443
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
CVE-2025-23240
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...
CVE-2025-22897
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow...
CVE-2025-20021
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
CVE-2025-20042
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read...
CVE-2025-20011
in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory...
CVE-2025-23409
CVE-2025-23409 affects OpenHarmony v5.0.2 and earlier. The issue is a use-after-free in pre-installed apps that enables a local attacker to achieve arbitrary code execution in restricted scenarios. The primary cause is use-after-free vulnerability in the affected software component. The documents...
CVE-2025-22835
CVE-2025-22835 affects OpenHarmony v5.0.2 and earlier. The vulnerability is an out-of-bounds write in Arkcompiler Ets Runtime, allowing a local attacker to achieve arbitrary code execution in pre-installed applications, with exploitation possible only in restricted scenarios. The connected docume...
CVE-2025-21084
CVE-2025-21084 affects OpenHarmony v5.0.2 and earlier. It is described as a local arbitrary code execution vulnerability in pre-installed apps due to a NULL pointer dereference, exploitable only in restricted scenarios. The CVSS/metrics indicate local access with low privileges and high impact to...
CVE-2025-20091
CVE-2025-20091 affects OpenHarmony v5.0.2 and earlier. The issue is a use-after-free in components used by pre-installed apps, enabling local arbitrary code execution in restricted scenarios. NVD notes a HIGH-severity, local exploitable vector with low attack complexity and no user interaction re...