CVE-2023-0083

The CVE-2023-0083 issue affects the ArKUI framework subsystem in OpenHarmony v3.1.5 and earlier, and v3.0.7 and earlier. Root cause: improper input validation in the ArKUI component, which a local attacker can exploit by sending malicious data, leading to the target application crash (impact: ava...

PT-2023-20378 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.4 Description: The issue is related to a null pointer reference vulnerability in the bundle management subsystem. This can be exploited by local attackers to cause a denial-of-service DoS attack on the system...

OpenHarmony 代码问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.4 version and earlier, OpenHarmony-v3.0.7 version and earlier, which stems from a null pointer reference...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.5 version and earlier, OpenHarmony-v3.0.7 version and earlier. An attacker exploited the vulnerability to send...

PT-2023-18411 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.5 Description: The kernel subsystem hmdfs has an arbitrary memory accessing issue, allowing network attackers to launch a remote attack and obtain kernel memory data of the target system. Recommendations: For...

PT-2023-19623 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.4 OpenHarmony versions prior to 3.0.7 Description: The Communication Wi-Fi subsystem has a null pointer reference issue that can be exploited by local attackers to cause the current application to crash...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.5 version and earlier versions. An attacker exploiting this vulnerability could gain access to kernel memory data...

PT-2023-15998 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.5 OpenHarmony versions prior to 3.0.7 Description: The ArKUI framework subsystem has an Improper Input Validation issue that can be exploited by local attackers to send malicious data, causing the current...

PT-2023-18495 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.5 Description: The issue is related to a Use After Free UAF vulnerability in the kernel subsystem function check permission for set tokenid. This vulnerability can be exploited by local attackers to escalate...

OpenHarmony 资源管理错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.5 version and earlier versions. An attacker can exploit the vulnerability to escalate to root privileges...

OpenHarmony 代码问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.4 and earlier versions, which stems from a null pointer reference vulnerability in the bundle management subsyste...

CVE-2022-43662

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...

CVE-2023-0036

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

CVE-2023-0036

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

CVE-2022-45126

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...

CVE-2023-0035

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

CVE-2022-43662

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...

CVE-2022-45126

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...

CVE-2023-0035

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

Stack overflow

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...