# cve.now: Openharmony

The newest entries naming Openharmony as an affected vendor (up to 200), of 177 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-33565](https://cve.now/CVE-2026-33565.md): kernel\_linux\_common\_modules has a Race Condition vulnerability (CVSS 3.3)
- [CVE-2026-28733](https://cve.now/CVE-2026-28733.md): filemanagement\_storage\_service has an use after free vulnerability (CVSS 6.5)
- [CVE-2026-27766](https://cve.now/CVE-2026-27766.md): multimedia\_audio\_framework has a Race Condition vulnerability (CVSS 5.5)
- [CVE-2026-25850](https://cve.now/CVE-2026-25850.md): filemanagement\_storage\_service has an improper preservation of permissions vulnerability (CVSS 5.5)
- [CVE-2026-25781](https://cve.now/CVE-2026-25781.md): kernel\_liteos\_a has an out-of-bounds write vulnerability (CVSS 8.4)
- [CVE-2026-28751](https://cve.now/CVE-2026-28751.md): filemanagement\_storage\_service has an improper input validation vulnerability (CVSS 3.3)
- [CVE-2026-27781](https://cve.now/CVE-2026-27781.md): kernel\_liteos\_a has an integer overflow vulnerability (CVSS 3.3)
- [CVE-2026-27648](https://cve.now/CVE-2026-27648.md): web\_webview has an out-of-bounds write vulnerability (CVSS 8.8)
- [CVE-2026-25110](https://cve.now/CVE-2026-25110.md): Sensors\_medical\_sensor has a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2026-24792](https://cve.now/CVE-2026-24792.md): web\_webview has a Race Condition vulnerability (CVSS 8.1)
- [CVE-2025-6969](https://cve.now/CVE-2025-6969.md): ability\_ability\_runtime an improper input validation vulnerability (CVSS 5.0)
- [CVE-2025-26474](https://cve.now/CVE-2025-26474.md): communication\_ipc an improper input validation vulnerability (CVSS 3.3)
- [CVE-2025-52458](https://cve.now/CVE-2025-52458.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 5.5)
- [CVE-2025-41432](https://cve.now/CVE-2025-41432.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 5.5)
- [CVE-2025-25277](https://cve.now/CVE-2025-25277.md): arkcompiler\_ets\_runtime has a type confusion vulnerability (CVSS 6.3)
- [CVE-2025-12736](https://cve.now/CVE-2025-12736.md): multimedia\_audio\_standard has an insecure storage of sensitive information vulnerability (CVSS 6.5)
- [CVE-2026-0639](https://cve.now/CVE-2026-0639.md): liteos\_a has a missing release of memory vulnerability (CVSS 3.3)
- [CVE-2025-27562](https://cve.now/CVE-2025-27562.md): communication\_dsoftbus has a missing release of memory vulnerability (CVSS 3.3)
- [CVE-2025-27128](https://cve.now/CVE-2025-27128.md): liteos\_a has an UAF vulnerability (CVSS 8.4)
- [CVE-2025-25212](https://cve.now/CVE-2025-25212.md): pasteboard has an improper input vulnerability (CVSS 3.3)
- [CVE-2025-24844](https://cve.now/CVE-2025-24844.md): communication\_dsoftbus has a missing release of memory vulnerability (CVSS 3.3)
- [CVE-2025-27536](https://cve.now/CVE-2025-27536.md): arkcompiler\_ets\_runtime has a type confusion vulnerability (CVSS 3.3)
- [CVE-2025-26690](https://cve.now/CVE-2025-26690.md): communication dsoftbus has a NULL pointer vulnerability (CVSS 3.3)
- [CVE-2025-24925](https://cve.now/CVE-2025-24925.md): applications\_settings has a missing release of memory vulnerability (CVSS 3.3)
- [CVE-2025-24298](https://cve.now/CVE-2025-24298.md): liteos\_a has an UAF vulnerability (CVSS 8.4)
- [CVE-2025-25278](https://cve.now/CVE-2025-25278.md): liteos\_a has a race condition vulnerability (CVSS 8.4)
- [CVE-2025-27577](https://cve.now/CVE-2025-27577.md): liteos\_a has a race condition vulnerability (CVSS 8.4)
- [CVE-2025-27247](https://cve.now/CVE-2025-27247.md): Pasteboard has an improper preservation of permissions vulnerability (CVSS 5.5)
- [CVE-2025-27242](https://cve.now/CVE-2025-27242.md): Ssecurity\_component\_manager has an improper input vulnerability (CVSS 3.3)
- [CVE-2025-27563](https://cve.now/CVE-2025-27563.md): security\_access\_token has an improper preservation of permissions vulnerability (CVSS 3.3)
- [CVE-2025-26693](https://cve.now/CVE-2025-26693.md): security\_access\_token has an improper preservation of permissions vulnerability (CVSS 3.3)
- [CVE-2025-26691](https://cve.now/CVE-2025-26691.md): telephony\_call\_manager has an improper preservation of permissions vulnerability (CVSS 5.5)
- [CVE-2025-27131](https://cve.now/CVE-2025-27131.md): kernel\_liteos\_m has an improper input vulnerability (CVSS 6.1)
- [CVE-2025-24493](https://cve.now/CVE-2025-24493.md): kernel\_liteos\_a has a race condition vulnerability (CVSS 5.5)
- [CVE-2025-25217](https://cve.now/CVE-2025-25217.md): arkui\_ace\_enginehas a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2025-23235](https://cve.now/CVE-2025-23235.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 3.3)
- [CVE-2025-21082](https://cve.now/CVE-2025-21082.md): arkui\_ace\_engine has a type confusion vulnerability (CVSS 3.3)
- [CVE-2025-20063](https://cve.now/CVE-2025-20063.md): arkui\_ace\_engine has a type confusion vulnerability (CVSS 3.3)
- [CVE-2025-25052](https://cve.now/CVE-2025-25052.md): arkcompiler\_ets\_runtime has a buffer overflow vulnerability (CVSS 3.3)
- [CVE-2025-27241](https://cve.now/CVE-2025-27241.md): multimedia\_av\_codec has a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2025-27248](https://cve.now/CVE-2025-27248.md): ai\_neural\_network\_runtime has a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2025-22886](https://cve.now/CVE-2025-22886.md): distributeddatamgr\_udmf has a memory leak vulnerability (CVSS 3.3)
- [CVE-2025-27132](https://cve.now/CVE-2025-27132.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 3.8)
- [CVE-2025-25218](https://cve.now/CVE-2025-25218.md): third\_party\_mksh has a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2025-27534](https://cve.now/CVE-2025-27534.md): arkcompiler\_ets\_runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-25057](https://cve.now/CVE-2025-25057.md): third\_party\_NuttX has a memory leak vulnerability (CVSS 3.3)
- [CVE-2025-24304](https://cve.now/CVE-2025-24304.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 3.3)
- [CVE-2025-22851](https://cve.now/CVE-2025-22851.md): Liteos\_A has an integer overflow vulnerability (CVSS 6.5)
- [CVE-2025-22842](https://cve.now/CVE-2025-22842.md): arkcompiler\_ets\_runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-22452](https://cve.now/CVE-2025-22452.md): arkcompiler\_ets\_runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-20102](https://cve.now/CVE-2025-20102.md): arkcompiler\_ets\_runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-24309](https://cve.now/CVE-2025-24309.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 3.8)
- [CVE-2025-24301](https://cve.now/CVE-2025-24301.md): Arkcompiler Ets Runtime has an UAF vulnerability (CVSS 3.8)
- [CVE-2025-23420](https://cve.now/CVE-2025-23420.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 3.8)
- [CVE-2025-23418](https://cve.now/CVE-2025-23418.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-23414](https://cve.now/CVE-2025-23414.md): Arkcompiler Ets Runtime has an UAF vulnerability (CVSS 3.8)
- [CVE-2025-23409](https://cve.now/CVE-2025-23409.md): Communication Dsoftbus has an UAF vulnerability (CVSS 3.8)
- [CVE-2025-23240](https://cve.now/CVE-2025-23240.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 3.8)
- [CVE-2025-23234](https://cve.now/CVE-2025-23234.md): Arkcompiler Ets Runtime has a buffer overflow vulnerability (CVSS 3.3)
- [CVE-2025-22897](https://cve.now/CVE-2025-22897.md): Arkcompiler Ets Runtime has a buffer overflow vulnerability (CVSS 3.3)
- [CVE-2025-22847](https://cve.now/CVE-2025-22847.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-22841](https://cve.now/CVE-2025-22841.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-22837](https://cve.now/CVE-2025-22837.md): Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2025-22835](https://cve.now/CVE-2025-22835.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 3.8)
- [CVE-2025-22443](https://cve.now/CVE-2025-22443.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-21098](https://cve.now/CVE-2025-21098.md): Liteos-A has an insecure storage of sensitive information vulnerability (CVSS 5.5)
- [CVE-2025-21097](https://cve.now/CVE-2025-21097.md): Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability (CVSS 3.3)
- [CVE-2025-21089](https://cve.now/CVE-2025-21089.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-21084](https://cve.now/CVE-2025-21084.md): Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability (CVSS 3.8)
- [CVE-2025-20626](https://cve.now/CVE-2025-20626.md): Arkcompiler Ets Runtime has an UAF vulnerability (CVSS 3.8)
- [CVE-2025-20091](https://cve.now/CVE-2025-20091.md): Communication Dsoftbus has an UAF vulnerability (CVSS 3.8)
- [CVE-2025-20081](https://cve.now/CVE-2025-20081.md): Communication Dsoftbus has an UAF vulnerability (CVSS 3.8)
- [CVE-2025-20042](https://cve.now/CVE-2025-20042.md): Liteos-A has an out of bounds read vulnerability (CVSS 5.5)
- [CVE-2025-20024](https://cve.now/CVE-2025-20024.md): Arkcompiler Ets Runtime has an integer overflow vulnerability (CVSS 3.8)
- [CVE-2025-20021](https://cve.now/CVE-2025-20021.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 3.3)
- [CVE-2025-20011](https://cve.now/CVE-2025-20011.md): Communication Dsoftbus has a memory leak vulnerability (CVSS 3.3)
- [CVE-2025-0587](https://cve.now/CVE-2025-0587.md): Arkcompiler Ets Runtime has an integer overflow vulnerability (CVSS 3.8)
- [CVE-2025-0304](https://cve.now/CVE-2025-0304.md): Liteos\_a has an use after free vulnerability (CVSS 8.8)
- [CVE-2025-0303](https://cve.now/CVE-2025-0303.md): Liteos\_a has a buffer overflow vulnerability (CVSS 8.8)
- [CVE-2025-0302](https://cve.now/CVE-2025-0302.md): Liteos\_a has an integer overflow read vulnerability (CVSS 5.5)
- [CVE-2024-54030](https://cve.now/CVE-2024-54030.md): Communication\_dsoftbus has an UAF vulnerability (CVSS 4.4)
- [CVE-2024-47398](https://cve.now/CVE-2024-47398.md): Liteos\_a has an out-of-bounds write vulnerability (CVSS 8.8)
- [CVE-2024-45070](https://cve.now/CVE-2024-45070.md): Liteos\_a has an out-of-bounds read vulnerability (CVSS 5.5)
- [CVE-2024-9978](https://cve.now/CVE-2024-9978.md): Liteos\_a has an out-of-bounds read vulnerability (CVSS 5.5)
- [CVE-2024-12082](https://cve.now/CVE-2024-12082.md): Ability Runtime has an out-of-bounds read permission bypass vulnerability (CVSS 5.5)
- [CVE-2024-10074](https://cve.now/CVE-2024-10074.md): Liteos\_a has an use after free vulnerability (CVSS 8.8)
- [CVE-2024-47402](https://cve.now/CVE-2024-47402.md): Liteos\_a has an Out-of-bounds Read vulnerability (CVSS 3.3)
- [CVE-2024-47137](https://cve.now/CVE-2024-47137.md): Liteos\_a has an out-of-bounds Write vulnerability (CVSS 8.4)
- [CVE-2024-47404](https://cve.now/CVE-2024-47404.md): Liteos\_a has a double free vulnerability (CVSS 8.4)
- [CVE-2024-47797](https://cve.now/CVE-2024-47797.md): Liteos\_a has an out-of-bounds Write vulnerability (CVSS 8.4)
- [CVE-2024-45382](https://cve.now/CVE-2024-45382.md): Liteos\_a has an Out-of-bounds Write vulnerability (CVSS 3.3)
- [CVE-2024-43697](https://cve.now/CVE-2024-43697.md): Liteos\_a has an Improper Input Validation vulnerability (CVSS 3.3)
- [CVE-2024-43696](https://cve.now/CVE-2024-43696.md): Liteos\_a has an Memory Leak vulnerability (CVSS 3.3)
- [CVE-2024-39831](https://cve.now/CVE-2024-39831.md): AccessTokenManager has an use after free vulnerability (CVSS 4.4)
- [CVE-2024-39806](https://cve.now/CVE-2024-39806.md): Liteos\_a has an out-of-bounds Read vulnerability (CVSS 5.5)
- [CVE-2024-41160](https://cve.now/CVE-2024-41160.md): Liteos-A has an use after free vulnerability (CVSS 8.8)
- [CVE-2024-41157](https://cve.now/CVE-2024-41157.md): Liteos-A has an use after free vulnerability (CVSS 8.8)
- [CVE-2024-39816](https://cve.now/CVE-2024-39816.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 8.4)
- [CVE-2024-39775](https://cve.now/CVE-2024-39775.md): Net Manager has an out-of-bounds read permission bypass vulnerability (CVSS 6.5)
- [CVE-2024-39612](https://cve.now/CVE-2024-39612.md): Background Task Manager has an out-of-bounds read permission bypass vulnerability (CVSS 5.5)
- [CVE-2024-38386](https://cve.now/CVE-2024-38386.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 8.4)
- [CVE-2024-38382](https://cve.now/CVE-2024-38382.md): Ability Runtime has an out-of-bounds read permission bypass vulnerability (CVSS 5.5)
- [CVE-2024-28044](https://cve.now/CVE-2024-28044.md): Liteos-A has an integer overflow vulnerability (CVSS 3.3)
- [CVE-2024-37077](https://cve.now/CVE-2024-37077.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 8.2)
- [CVE-2024-37185](https://cve.now/CVE-2024-37185.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 8.2)
- [CVE-2024-36260](https://cve.now/CVE-2024-36260.md): Arkcompiler Ets Runtime has an out-of-bounds write vulnerability (CVSS 8.2)
- [CVE-2024-36278](https://cve.now/CVE-2024-36278.md): Arkcompiler Ets Runtime has a type confusion vulnerability (CVSS 3.3)
- [CVE-2024-36243](https://cve.now/CVE-2024-36243.md): Arkcompiler Ets Runtime has an out-of-bounds read vulnerability (CVSS 8.2)
- [CVE-2024-37030](https://cve.now/CVE-2024-37030.md): Arkcompiler Ets Runtime has a use after free vulnerability (CVSS 8.2)
- [CVE-2024-31071](https://cve.now/CVE-2024-31071.md): Arkcompiler Ets Runtime has a type confusion vulnerability (CVSS 3.3)
- [CVE-2024-3759](https://cve.now/CVE-2024-3759.md): Hmdfs has a use after free vulnerability (CVSS 6.5)
- [CVE-2024-3758](https://cve.now/CVE-2024-3758.md): Hmdfs has a heap buffer overflow vulnerability (CVSS 6.5)
- [CVE-2024-3757](https://cve.now/CVE-2024-3757.md): Arkcompiler runtime has an integer overflow vulnerability (CVSS 3.3)
- [CVE-2024-31078](https://cve.now/CVE-2024-31078.md): Bluetooth Service has a use after free vulnerability (CVSS 3.3)
- [CVE-2024-23808](https://cve.now/CVE-2024-23808.md): Arkcompiler ets frontend has an out-of-bounds read vulnerability (CVSS 5.2)
- [CVE-2024-27217](https://cve.now/CVE-2024-27217.md): MSDP has a use after free vulnerability (CVSS 6.5)
- [CVE-2024-29086](https://cve.now/CVE-2024-29086.md): Arkcompiler runtime has a stack overflow svulnerability (CVSS 3.3)
- [CVE-2024-28951](https://cve.now/CVE-2024-28951.md): Arkcompiler runtime has a use after free vulnerability (CVSS 5.5)
- [CVE-2024-28226](https://cve.now/CVE-2024-28226.md): Fs has an improper input validation vulnerability (CVSS 8.1)
- [CVE-2024-24581](https://cve.now/CVE-2024-24581.md): Arkcompiler runtime has an out-of-bounds write vulnerability (CVSS 6.5)
- [CVE-2024-22092](https://cve.now/CVE-2024-22092.md): Bundlemanager has an authentication bypass vulnerability (CVSS 7.7)
- [CVE-2024-29074](https://cve.now/CVE-2024-29074.md): Telephony has an improper input validation vulnerability (CVSS 6.5)
- [CVE-2024-22180](https://cve.now/CVE-2024-22180.md): Camera has a use after free vulnerability (CVSS 3.3)
- [CVE-2024-22098](https://cve.now/CVE-2024-22098.md): AVSession has a use after free vulnerability (CVSS 6.5)
- [CVE-2024-22177](https://cve.now/CVE-2024-22177.md): Audio has an improper preservation of permissions vulnerability (CVSS 3.3)
- [CVE-2024-21834](https://cve.now/CVE-2024-21834.md): Arkui has a type confusion vulnerability (CVSS 3.3)
- [CVE-2024-21826](https://cve.now/CVE-2024-21826.md): Huks has an insecure storage of sensitive information vulnerability (CVSS 4.3)
- [CVE-2024-21816](https://cve.now/CVE-2024-21816.md): Background task manager has an improper preservation of permissions vulnerability (CVSS 4.0)
- [CVE-2023-49602](https://cve.now/CVE-2023-49602.md): Arkui has a type confusion vulnerability (CVSS 2.9)
- [CVE-2023-46708](https://cve.now/CVE-2023-46708.md): Wlan has a use after free vulnerability (CVSS 4.3)
- [CVE-2023-25176](https://cve.now/CVE-2023-25176.md): Pasteboard has an out-of-bounds read vulnerability (CVSS 2.9)
- [CVE-2024-21863](https://cve.now/CVE-2024-21863.md): Dsoftbus has an improper input validation vulnerability (CVSS 4.7)
- [CVE-2024-21851](https://cve.now/CVE-2024-21851.md): Dsoftbus has an integer overflow vulnerability (CVSS 2.9)
- [CVE-2024-0285](https://cve.now/CVE-2024-0285.md): Dsoftbus has an improper input validation vulnerability (CVSS 4.7)
- [CVE-2023-45734](https://cve.now/CVE-2023-45734.md): Dsoftbus has an out-of-bounds write vulnerability (CVSS 4.2)
- [CVE-2024-21860](https://cve.now/CVE-2024-21860.md): Dsoftbus has a use after free vulnerability (CVSS 8.2)
- [CVE-2024-21845](https://cve.now/CVE-2024-21845.md): Dsoftbus has an integer overflow vulnerability (CVSS 2.9)
- [CVE-2023-49118](https://cve.now/CVE-2023-49118.md): Dsoftbus has an out-of-bounds read vulnerability (CVSS 2.9)
- [CVE-2023-43756](https://cve.now/CVE-2023-43756.md): Dsoftbus has an out-of-bounds read vulnerability (CVSS 2.9)
- [CVE-2023-49142](https://cve.now/CVE-2023-49142.md): multimedia audio has a UAF vulnerability (CVSS 4.0)
- [CVE-2023-49135](https://cve.now/CVE-2023-49135.md): multimedia player has a UAF vulnerability (CVSS 4.0)
- [CVE-2023-48360](https://cve.now/CVE-2023-48360.md): multimedia player has a UAF vulnerability (CVSS 4.0)
- [CVE-2023-47857](https://cve.now/CVE-2023-47857.md): multimedia camera has a UAF vulnerability (CVSS 4.0)
- [CVE-2023-47216](https://cve.now/CVE-2023-47216.md): Liteos-A has a missing release of resource vulnerability (CVSS 2.9)
- [CVE-2023-47217](https://cve.now/CVE-2023-47217.md): Arkruntime has a buffer overflow vulnerability (CVSS 4.0)
- [CVE-2023-46100](https://cve.now/CVE-2023-46100.md): Cert manager has a use of uninitialized resource vulnerability (CVSS 6.2)
- [CVE-2023-42774](https://cve.now/CVE-2023-42774.md): Liteos-A has a incorrect default permissions vulnerability (CVSS 6.2)
- [CVE-2023-6045](https://cve.now/CVE-2023-6045.md): Arkruntime has a type confusion vulnerability (CVSS 5.9)
- [CVE-2023-46705](https://cve.now/CVE-2023-46705.md): Arkruntime has a type confusion vulnerability (CVSS 6.2)
- [CVE-2023-43612](https://cve.now/CVE-2023-43612.md): Hiview has an improper preservation of permissions vulnerability (CVSS 8.4)
- [CVE-2023-3116](https://cve.now/CVE-2023-3116.md): Liteos-A has a incorrect default permissions vulnerability (CVSS 7.3)
- [CVE-2023-4753](https://cve.now/CVE-2023-4753.md): OpenHarmony v3.2.1 and prior version has a system call function usage error (CVSS 3.9)
- [CVE-2023-25947](https://cve.now/CVE-2023-25947.md): The bundle management subsystem has a improper input validation when installing a HAP package. (CVSS 6.2)
- [CVE-2023-24465](https://cve.now/CVE-2023-24465.md): Communication Wi-Fi subsystem has a null pointer reference vulnerability when receving external data. (CVSS 5.5)
- [CVE-2023-22436](https://cve.now/CVE-2023-22436.md): The kernel subsystem function check\_permission\_for\_set\_tokenid has an UAF vulnerability. (CVSS 7.8)
- [CVE-2023-22301](https://cve.now/CVE-2023-22301.md): The kernel subsystem hmdfs has a arbitrary memory accessing vulnerability. (CVSS 6.5)
- [CVE-2023-0083](https://cve.now/CVE-2023-0083.md): The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access. (CVSS 4.0)
- [CVE-2023-0036](https://cve.now/CVE-2023-0036.md): platform\_callback\_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack". (CVSS 6.5)
- [CVE-2023-0035](https://cve.now/CVE-2023-0035.md): softbus\_client\_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack". (CVSS 6.5)
- [CVE-2022-43662](https://cve.now/CVE-2022-43662.md): Kernel subsystem in kernel\_liteos\_a has a kernel stack overflow vulnerability when call SysTimerGettime. (CVSS 4.0)
- [CVE-2022-45126](https://cve.now/CVE-2022-45126.md): Kernel subsystem in kernel\_liteos\_a has a kernel stack overflow vulnerability when call SysClockGettime. (CVSS 4.0)
- [CVE-2022-45877](https://cve.now/CVE-2022-45877.md): PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks. (CVSS 8.3)
- [CVE-2022-45118](https://cve.now/CVE-2022-45118.md): Telephony in communication subsystem sends public events with personal data, but the permission is not set. (CVSS 6.2)
- [CVE-2022-44455](https://cve.now/CVE-2022-44455.md): The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. (CVSS 6.8)
- [CVE-2022-41802](https://cve.now/CVE-2022-41802.md): Kernel subsystem in kernel\_liteos\_a has a kernel stack overflow vulnerability when call SysClockGetres. (CVSS 4.0)
- [CVE-2022-43495](https://cve.now/CVE-2022-43495.md): An abnormal packet recieved when distributedhardware\_device\_manager joining a network could cause a device reboot. (CVSS 6.5)
- [CVE-2022-43449](https://cve.now/CVE-2022-43449.md): Arbitrary file read via download\_server. (CVSS 6.2)
- [CVE-2022-43451](https://cve.now/CVE-2022-43451.md): Multiple path traversal in appspawn and nwebspawn services. (CVSS 8.4)
- [CVE-2022-42464](https://cve.now/CVE-2022-42464.md): Kernel memory pool override in /dev/mmz\_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ... (CVSS 6.7)
- [CVE-2022-42463](https://cve.now/CVE-2022-42463.md): Softbus\_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ... (CVSS 8.3)
- [CVE-2022-41686](https://cve.now/CVE-2022-41686.md): Out-of-bound memory read and write in /dev/mmz\_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ... (CVSS 5.1)
- [CVE-2022-42488](https://cve.now/CVE-2022-42488.md): Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services. (CVSS 8.4)
- [CVE-2022-38701](https://cve.now/CVE-2022-38701.md): IPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information. (CVSS 6.2)
- [CVE-2022-38081](https://cve.now/CVE-2022-38081.md): Tokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system. (CVSS 6.2)
- [CVE-2022-38700](https://cve.now/CVE-2022-38700.md): multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service. (CVSS 8.8)
- [CVE-2022-38064](https://cve.now/CVE-2022-38064.md): windowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information. (CVSS 6.2)
- [CVE-2022-36423](https://cve.now/CVE-2022-36423.md): Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices. (CVSS 7.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/openharmony
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.