Openatom vulnerabilities, page 2
165 vulnerabilities
Known vulnerabilities in Openatom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
RoutineCVE-2025-26693openharmony +1 moresecurity_access_token has an improper preservation of permissions vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-26691openharmony +1 moretelephony_call_manager has an improper preservation of permissions vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-27131openharmony +1 morekernel_liteos_m has an improper input vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOSÂ through improper input.CVSS6.1MediumEPSS0.14%RoutineCVE-2025-24493openharmony +1 morekernel_liteos_a has a race condition vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.CVSS5.5MediumEPSS0.10%RoutineCVE-2025-25217openharmony +1 morearkui_ace_enginehas a NULL pointer dereference vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-23235openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-21082openharmony +1 morearkui_ace_engine has a type confusion vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-20063openharmony +1 morearkui_ace_engine has a type confusion vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-25052openharmony +1 morearkcompiler_ets_runtime has a buffer overflow vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-27241openharmony +1 moremultimedia_av_codec has a NULL pointer dereference vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-27248openharmony +1 moreai_neural_network_runtime has a NULL pointer dereference vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-22886openharmony +1 moredistributeddatamgr_udmf has a memory leak vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-27132openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-25218openharmony +1 morethird_party_mksh has a NULL pointer dereference vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-27534openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-25057openharmony +1 morethird_party_NuttX has a memory leak vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-24304openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-22851openharmony +1 moreLiteos_A has an integer overflow vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.CVSS8.8HighEPSS0.18%RoutineCVE-2025-22842openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-22452openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.15%