Openatom vulnerabilities, page 4

165 vulnerabilities

Known vulnerabilities in Openatom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

RoutineCVE-2025-20091openharmony +1 moreCommunication Dsoftbus has an UAF vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-20081openharmony +1 moreCommunication Dsoftbus has an UAF vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVSS5.3MediumEPSS0.15%RoutineCVE-2025-20042openharmony +1 moreLiteos-A has an out of bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-20024openharmony +1 moreArkcompiler Ets Runtime has an integer overflow vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.CVSS5.3MediumEPSS0.15%RoutineCVE-2025-20021openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-20011openharmony +1 moreCommunication Dsoftbus has a memory leak vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.14%RoutineCVE-2025-0587openharmony +1 moreArkcompiler Ets Runtime has an integer overflow vulnerabilityin OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.18%RoutineCVE-2025-0304openharmony +1 moreLiteos_a has an use after free vulnerabilityin OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.CVSS8.8HighEPSS0.17%RoutineCVE-2025-0303openharmony +1 moreLiteos_a has a buffer overflow vulnerabilityin OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.CVSS8.8HighEPSS0.17%RoutineCVE-2025-0302openharmony +1 moreLiteos_a has an integer overflow read vulnerabilityin OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-54030openharmony +1 moreCommunication_dsoftbus has an UAF vulnerabilityin OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free.CVSS5.5MediumEPSS0.18%RoutineCVE-2024-47398openharmony +1 moreLiteos_a has an out-of-bounds write vulnerabilityin OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.CVSS8.8HighEPSS0.16%RoutineCVE-2024-45070openharmony +1 moreLiteos_a has an out-of-bounds read vulnerabilityin OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-9978openharmony +1 moreLiteos_a has an out-of-bounds read vulnerabilityin OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-12082openharmony +1 moreAbility Runtime has an out-of-bounds read permission bypass vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-10074openharmony +1 moreLiteos_a has an use after free vulnerabilityin OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.CVSS8.8HighEPSS0.16%RoutineCVE-2024-47402openharmony +1 moreLiteos_a has an Out-of-bounds Read vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-47137openharmony +1 moreLiteos_a has an out-of-bounds Write vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.CVSS8.4HighEPSS0.17%RoutineCVE-2024-47404openharmony +1 moreLiteos_a has a double free vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free.CVSS8.4HighEPSS0.17%RoutineCVE-2024-47797openharmony +1 moreLiteos_a has an out-of-bounds Write vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.CVSS8.4HighEPSS0.17%