CVE-2024-9978

CVE-2024-9978 affects OpenHarmony v4.1.1 and earlier. The issue is an out-of-bounds read that can enable a local attacker to cause information leakage (confidentiality impact HIGH; integrity/availability not affected per the sources). The CVE’s public entries consistently describe a local-exploit...

CVE-2024-39775

in OpenHarmony v4.1.0 and prior versions allow a remote attacker cause information leak through out-of-bounds Read...

CVE-2024-36278

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion...

CVE-2024-36260

CVE-2024-36260 affects OpenHarmony, with Arkcompiler Ets Runtime vulnerable to an out-of-bounds write that could enable remote code execution in pre-installed apps on OpenHarmony v4.0.0 and earlier. The issue is described as a remote code execution risk; no exploit details are provided in the sou...

CVE-2024-36278

CVE-2024-36278 affects OpenHarmony, specifically versions before 4.0.0. The root cause is a type confusion vulnerability in Arkcompiler Ets Runtime that can be triggered by a local attacker, leading to application crashes (availability impact). The CVE description states the issue exists in OpenH...

CVE-2023-49118

in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read...

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which stems from an unreleased Liteos-A resource...

CVE-2023-46705

in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion...

CVE-2022-43662 Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime.

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...

CVE-2022-43449 Arbitrary file read via download_server.

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via downloadserver. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to downloadserver service which run with UID 1000...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.2, which originates from an arbitrary file read via downloadserver, and can be exploited by an attacker to instal...