Openharmony vulnerabilities
177 CVEs and advisories name Openharmony as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-33565kernel_linux_common_modules has a Race Condition vulnerability
- CVE-2026-28733filemanagement_storage_service has an use after free vulnerability
- CVE-2026-27766multimedia_audio_framework has a Race Condition vulnerability
- CVE-2026-25850filemanagement_storage_service has an improper preservation of permissions vulnerability
- CVE-2026-25781kernel_liteos_a has an out-of-bounds write vulnerability
- CVE-2026-28751filemanagement_storage_service has an improper input validation vulnerability
- CVE-2026-27781kernel_liteos_a has an integer overflow vulnerability
- CVE-2026-27648web_webview has an out-of-bounds write vulnerability
- CVE-2026-25110Sensors_medical_sensor has a NULL pointer dereference vulnerability
- CVE-2026-24792web_webview has a Race Condition vulnerability
- CVE-2025-6969ability_ability_runtime an improper input validation vulnerability
- CVE-2025-26474communication_ipc an improper input validation vulnerability
- CVE-2025-52458arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- CVE-2025-41432arkcompiler_ets_runtime has an out-of-bounds write vulnerability
- CVE-2025-25277arkcompiler_ets_runtime has a type confusion vulnerability
- CVE-2025-12736multimedia_audio_standard has an insecure storage of sensitive information vulnerability
- CVE-2026-0639liteos_a has a missing release of memory vulnerability
- CVE-2025-27562communication_dsoftbus has a missing release of memory vulnerability
- CVE-2025-27128liteos_a has an UAF vulnerability
- CVE-2025-25212pasteboard has an improper input vulnerability
- CVE-2025-24844communication_dsoftbus has a missing release of memory vulnerability
- CVE-2025-27536arkcompiler_ets_runtime has a type confusion vulnerability
- CVE-2025-26690communication dsoftbus has a NULL pointer vulnerability
- CVE-2025-24925applications_settings has a missing release of memory vulnerability
- CVE-2025-24298liteos_a has an UAF vulnerability
- CVE-2025-25278liteos_a has a race condition vulnerability
- CVE-2025-27577liteos_a has a race condition vulnerability
- CVE-2025-27247Pasteboard has an improper preservation of permissions vulnerability
- CVE-2025-27242Ssecurity_component_manager has an improper input vulnerability
- CVE-2025-27563security_access_token has an improper preservation of permissions vulnerability