Openatom Openharmony vulnerabilities, page 3
156 vulnerabilities
Known vulnerabilities in Openatom Openharmony, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2025-20102openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-24309openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-24301openharmony +1 moreArkcompiler Ets Runtime has an UAF vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-23420openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-23418openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-23414openharmony +1 moreArkcompiler Ets Runtime has an UAF vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-23409openharmony +1 moreCommunication Dsoftbus has an UAF vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-23240openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-23234openharmony +1 moreArkcompiler Ets Runtime has a buffer overflow vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-22897openharmony +1 moreArkcompiler Ets Runtime has a buffer overflow vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-22847openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-22841openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-22837openharmony +1 moreArkcompiler Ets Runtime has a NULL pointer dereference vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-22835openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-22443openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-21098openharmony +1 moreLiteos-A has an insecure storage of sensitive information vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.CVSS5.5MediumEPSS0.17%RoutineCVE-2025-21097openharmony +1 moreArkcompiler Ets Runtime has a NULL pointer dereference vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-21089openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-21084openharmony +1 moreArkcompiler Ets Runtime has an NULL pointer dereference vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-20626openharmony +1 moreArkcompiler Ets Runtime has an UAF vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%