Vulnerabilities (CVE)

Filtered by vendor Openatom Subscribe
Total 149 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-31078 1 Openatom 1 Openharmony 2025-01-02 N/A 5.5 MEDIUM
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.
CVE-2024-3759 1 Openatom 1 Openharmony 2025-01-02 N/A 7.8 HIGH
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.
CVE-2024-21816 1 Openatom 1 Openharmony 2024-12-16 N/A 5.5 MEDIUM
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.
CVE-2024-21826 1 Openatom 1 Openharmony 2024-12-16 N/A 5.5 MEDIUM
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.
CVE-2023-49602 1 Openatom 1 Openharmony 2024-12-16 N/A 5.5 MEDIUM
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.
CVE-2023-46708 1 Openatom 1 Openharmony 2024-12-16 N/A 7.8 HIGH
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.
CVE-2023-25176 1 Openatom 1 Openharmony 2024-12-16 N/A 5.5 MEDIUM
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-9978 1 Openatom 1 Openharmony 2024-12-11 N/A 5.5 MEDIUM
in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-12082 1 Openatom 1 Openharmony 2024-12-11 N/A 5.5 MEDIUM
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-10074 1 Openatom 1 Openharmony 2024-12-11 N/A 7.8 HIGH
in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.
CVE-2024-47402 1 Openatom 1 Openharmony 2024-11-06 N/A 5.5 MEDIUM
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2024-47137 1 Openatom 1 Openharmony 2024-11-06 N/A 7.8 HIGH
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
CVE-2024-47404 1 Openatom 1 Openharmony 2024-11-06 N/A 7.8 HIGH
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free.
CVE-2024-47797 1 Openatom 1 Openharmony 2024-11-06 N/A 7.8 HIGH
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
CVE-2024-45382 1 Openatom 1 Openharmony 2024-10-16 N/A 5.5 MEDIUM
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.
CVE-2024-43697 1 Openatom 1 Openharmony 2024-10-16 N/A 5.5 MEDIUM
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.
CVE-2024-43696 1 Openatom 1 Openharmony 2024-10-16 N/A 5.5 MEDIUM
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak.
CVE-2024-39831 1 Openatom 1 Openharmony 2024-10-16 N/A 6.7 MEDIUM
in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.
CVE-2024-39806 1 Openatom 1 Openharmony 2024-10-16 N/A 5.5 MEDIUM
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2022-36423 2 Openatom, Openharmony 2 Openharmony, Openharmony 2024-09-09 N/A 7.4 HIGH
OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.