Vulnerabilities (CVE)

Filtered by vendor Openatom Subscribe
Total 124 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-20063 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
CVE-2025-21082 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
CVE-2025-23235 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2025-24493 1 Openatom 1 Openharmony 2025-06-09 N/A 5.5 MEDIUM
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.
CVE-2025-25217 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
CVE-2025-26691 1 Openatom 1 Openharmony 2025-06-09 N/A 5.5 MEDIUM
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVE-2025-26693 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVE-2025-27131 1 Openatom 1 Openharmony 2025-06-09 N/A 6.1 MEDIUM
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.
CVE-2025-27242 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.
CVE-2025-27247 1 Openatom 1 Openharmony 2025-06-09 N/A 5.5 MEDIUM
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVE-2025-27563 1 Openatom 1 Openharmony 2025-06-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVE-2025-27132 1 Openatom 1 Openharmony 2025-05-09 N/A 3.8 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-27241 1 Openatom 1 Openharmony 2025-05-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
CVE-2025-27248 1 Openatom 1 Openharmony 2025-05-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
CVE-2025-22886 1 Openatom 1 Openharmony 2025-05-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
CVE-2025-25052 1 Openatom 1 Openharmony 2025-05-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.
CVE-2025-25218 1 Openatom 1 Openharmony 2025-05-09 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
CVE-2021-33658 2 Huawei, Openatom 2 Atune, Openeuler 2025-04-02 4.6 MEDIUM 7.8 HIGH
atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.
CVE-2021-33644 3 Fedoraproject, Feep, Openatom 3 Fedora, Libtar, Openeuler 2025-04-02 N/A 8.1 HIGH
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.
CVE-2021-33646 3 Fedoraproject, Feep, Openatom 3 Fedora, Libtar, Openeuler 2025-04-02 N/A 7.5 HIGH
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.