Openatom vulnerabilities, page 5
165 vulnerabilities
Known vulnerabilities in Openatom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
RoutineCVE-2024-45382openharmony +1 moreLiteos_a has an Out-of-bounds Write vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.CVSS5.5MediumEPSS0.14%RoutineCVE-2024-43697openharmony +1 moreLiteos_a has an Improper Input Validation vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.CVSS5.5MediumEPSS0.14%RoutineCVE-2024-43696openharmony +1 moreLiteos_a has an Memory Leak vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak.CVSS5.5MediumEPSS0.14%RoutineCVE-2024-39831openharmony +1 moreAccessTokenManager has an use after free vulnerabilityin OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.CVSS6.7MediumEPSS0.17%RoutineCVE-2024-39806openharmony +1 moreLiteos_a has an out-of-bounds Read vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-41160openharmony +1 moreLiteos-A has an use after free vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.CVSS8.8HighEPSS0.16%RoutineCVE-2024-41157openharmony +1 moreLiteos-A has an use after free vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.CVSS8.8HighEPSS0.19%RoutineCVE-2024-39816openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVSS8.4HighEPSS0.17%RoutineCVE-2024-39775openharmony +1 moreNet Manager has an out-of-bounds read permission bypass vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a remote attacker cause information leak through out-of-bounds Read.CVSS7.5HighEPSS0.45%RoutineCVE-2024-39612openharmony +1 moreBackground Task Manager has an out-of-bounds read permission bypass vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-38386openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVSS8.4HighEPSS0.21%RoutineCVE-2024-38382openharmony +1 moreAbility Runtime has an out-of-bounds read permission bypass vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVSS5.5MediumEPSS0.15%RoutineCVE-2024-28044openharmony +1 moreLiteos-A has an integer overflow vulnerabilityin OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow.CVSS5.5MediumEPSS0.14%RoutineCVE-2024-37077openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVSS9.8CriticalEPSS0.62%RoutineCVE-2024-37185openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVSS9.8CriticalEPSS0.62%RoutineCVE-2024-36260openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVSS9.8CriticalEPSS0.57%RoutineCVE-2024-36278openharmony +1 moreArkcompiler Ets Runtime has a type confusion vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.CVSS3.3LowEPSS0.14%RoutineCVE-2024-36243openharmony +1 moreArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.CVSS9.8CriticalEPSS0.57%RoutineCVE-2024-37030openharmony +1 moreArkcompiler Ets Runtime has a use after free vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.CVSS9.8CriticalEPSS0.57%RoutineCVE-2024-31071openharmony +1 moreArkcompiler Ets Runtime has a type confusion vulnerabilityin OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.CVSS3.3LowEPSS0.14%