Openharmony vulnerabilities
177 CVEs and advisories name Openharmony as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-3116Liteos-A has a incorrect default permissions vulnerability
- CVE-2023-4753OpenHarmony v3.2.1 and prior version has a system call function usage error
- CVE-2023-25947The bundle management subsystem has a improper input validation when installing a HAP package.
- CVE-2023-24465Communication Wi-Fi subsystem has a null pointer reference vulnerability when receving external data.
- CVE-2023-22436The kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.
- CVE-2023-22301The kernel subsystem hmdfs has a arbitrary memory accessing vulnerability.
- CVE-2023-0083The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.
- CVE-2023-0036platform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack".
- CVE-2023-0035softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".
- CVE-2022-43662Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime.
- CVE-2022-45126Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.
- CVE-2022-45877PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.
- CVE-2022-45118Telephony in communication subsystem sends public events with personal data, but the permission is not set.
- CVE-2022-44455The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.
- CVE-2022-41802Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.
- CVE-2022-43495An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.
- CVE-2022-43449Arbitrary file read via download_server.
- CVE-2022-43451Multiple path traversal in appspawn and nwebspawn services.
- CVE-2022-42464Kernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...
- CVE-2022-42463Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...
- CVE-2022-41686Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...
- CVE-2022-42488Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.
- CVE-2022-38701IPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.
- CVE-2022-38081Tokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.
- CVE-2022-38700multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.
- CVE-2022-38064windowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.
- CVE-2022-36423Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.