1504 matches found
CVE-2024-22092
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action...
CVE-2024-22092
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action...
CVE-2024-29086 Arkcompiler runtime has a stack overflow svulnerability
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow...
CVE-2024-29086
CVE-2024-29086 affects OpenHarmony v3.2.4 and earlier. The issue is a local, stack-overflow–driven denial of service in the Arkcompiler runtime, enabling a local attacker to cause a DOS. Root cause identified as a stack overflow. Mitigation: upgrade to a version that contains a fix (no exact patc...
CVE-2024-29086 Arkcompiler runtime has a stack overflow svulnerability
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow...
CVE-2024-28951 Arkcompiler runtime has a use after free vulnerability
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free...
CVE-2024-28951 Arkcompiler runtime has a use after free vulnerability
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free...
CVE-2024-28951
Summary: CVE-2024-28951 affects OpenHarmony v4.0.0 and earlier and is described as a local-use-after-free vulnerability in the Arkcompiler runtime that allows arbitrary code execution in pre-installed apps. The vulnerability is local, requires privileges, and has a high impact on confidentiality,...
CVE-2024-28226 Fs has an improper input validation vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...
CVE-2024-28226 Fs has an improper input validation vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...
CVE-2024-28226
CVE-2024-28226 affects OpenHarmony prior to 4.0.0. A remote attacker can cause a Denial of Service via improper input handling in the OpenHarmony stack, impacting availability (CVE text cites DOS; CVSS indicates High impact). Root cause cited in CVE records is improper input validation. Affected ...
CVE-2024-24581 Arkcompiler runtime has an out-of-bounds write vulnerability
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write...
CVE-2024-24581 Arkcompiler runtime has an out-of-bounds write vulnerability
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write...
CVE-2024-24581
OpenHarmony vulnerability CVE-2024-24581 affects OpenHarmony v4.0.0 and earlier, caused by an out-of-bounds write in Arkcompiler runtime, enabling a local attacker to achieve arbitrary code execution. The issue is verified across multiple sources in the connected documents, which describe the sam...
CVE-2024-22092 Bundlemanager has an authentication bypass vulnerability
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action...
CVE-2024-22092 Bundlemanager has an authentication bypass vulnerability
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action...
CVE-2024-22092
OpenHarmony OpenHarmony v3.2.4 and earlier are affected by a remote authentication bypass that allows installing apps without proper permission checks, though user action is required. This is a high-severity issue (CVSS-like impact: high for integrity and confidentiality in some vectors) with pot...
CVE-2024-29074 Telephony has an improper input validation vulnerability
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input...
CVE-2024-29074
OpenHarmony v3.2.4 and earlier are affected by CVE-2024-29074, which allows a local attacker to execute arbitrary code in any app due to improper input validation. This is a local, high-severity issue with potential full control over targeted apps as indicated by CVSS metrics (AV:L, AC:L, PR:L, U...