Vulnerabilities (CVE)

Filtered by vendor Openharmony Subscribe
Total 41 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-21860 1 Openharmony 1 Openharmony 2024-02-07 N/A 8.8 HIGH
in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.
CVE-2024-21863 1 Openharmony 1 Openharmony 2024-02-07 N/A 6.2 MEDIUM
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.
CVE-2024-21845 1 Openharmony 1 Openharmony 2024-02-07 N/A 7.8 HIGH
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.
CVE-2024-0285 1 Openharmony 1 Openharmony 2024-02-07 N/A 5.5 MEDIUM
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.
CVE-2024-21851 1 Openharmony 1 Openharmony 2024-02-07 N/A 7.8 HIGH
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.
CVE-2023-49118 1 Openharmony 1 Openharmony 2024-02-07 N/A 5.5 MEDIUM
in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.
CVE-2023-45734 1 Openharmony 1 Openharmony 2024-02-07 N/A 8.8 HIGH
in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write.
CVE-2023-43756 1 Openharmony 1 Openharmony 2024-02-06 N/A 5.5 MEDIUM
in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.
CVE-2022-45877 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.3 MEDIUM
OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.
CVE-2023-46705 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion.
CVE-2023-47217 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow.
CVE-2023-46100 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource.
CVE-2023-47857 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.
CVE-2023-42774 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information through incorrect default permissions.
CVE-2023-6045 1 Openharmony 1 Openharmony 2024-02-05 N/A 7.8 HIGH
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.
CVE-2023-48360 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
CVE-2023-49135 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
CVE-2023-3116 1 Openharmony 1 Openharmony 2024-02-05 N/A 7.1 HIGH
in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file through incorrect default permissions.
CVE-2023-47216 1 Openharmony 1 Openharmony 2024-02-05 N/A 5.5 MEDIUM
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources
CVE-2023-43612 1 Openharmony 1 Openharmony 2024-02-05 N/A 7.8 HIGH
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions.