Read the docs

Openatom

Records165All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high63CVSS 7.0–8.9

Exploited now

Openatom records in CISA KEV

No Openatom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

156 records in Openharmony · all components

Priority MEDIUM 44

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2024-07-02 No fix listed CWE-787
Priority MEDIUM 44

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2024-07-02 No fix listed CWE-787
Priority MEDIUM 44

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2024-07-02 No fix listed CWE-416
Priority MEDIUM 44

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2024-07-02 No fix listed CWE-125
Priority MEDIUM 43

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2024-07-02 No fix listed CWE-787
TI-2024-14529 CVE-2024-21860 · GHSA-44qh-gw8j-g2gv

Dsoftbus has a use after free vulnerability

Priority MEDIUM 40

in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00401 Published 2024-02-02 Fixed in v4.0.1 CWE-416
Priority LOW 39

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2025-02-07 No fix listed CWE-416
Priority LOW 39

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00173 Published 2025-02-07 No fix listed CWE-120
Priority LOW 39

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00161 Published 2025-01-07 No fix listed CWE-787
TI-2024-27506 CVE-2024-41160 · GHSA-f5vg-6gfq-6587

Liteos-A has an use after free vulnerability

Priority LOW 39

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2024-09-02 No fix listed CWE-416
TI-2024-27504 CVE-2024-41157 · GHSA-8492-v5jh-m4r5

Liteos-A has an use after free vulnerability

Priority LOW 39

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00188 Published 2024-09-02 No fix listed CWE-416
TI-2024-09338 CVE-2024-10074 · GHSA-4qmf-h383-pv4h

Liteos_a has an use after free vulnerability

Priority LOW 39

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00157 Published 2024-12-03 No fix listed CWE-416
TI-2025-19985 CVE-2025-27128 · GHSA-xc48-fv99-qvrm

liteos_a has an UAF vulnerability

Priority LOW 38

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00159 Published 2025-08-11 No fix listed CWE-416
TI-2025-18044 CVE-2025-24298 · GHSA-xwf4-4p9v-22fp

liteos_a has an UAF vulnerability

Priority LOW 38

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00159 Published 2025-08-11 No fix listed CWE-416
Priority LOW 38

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00174 Published 2024-09-02 No fix listed CWE-787
Priority LOW 38

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00205 Published 2024-09-02 No fix listed CWE-787
Priority LOW 38

in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00288 Published 2024-02-02 No fix listed CWE-787
Priority LOW 38

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00191 Published 2023-11-20 No fix listed CWE-281
TI-2025-20392 CVE-2025-27577 · GHSA-g7ff-v8fg-2hpr

liteos_a has a race condition vulnerability

Priority LOW 37

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00113 Published 2025-08-11 No fix listed CWE-362
TI-2025-18932 CVE-2025-25278 · GHSA-wrcv-2hq2-rhwc

liteos_a has a race condition vulnerability

Priority LOW 37

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00121 Published 2025-08-11 No fix listed CWE-362
Priority LOW 37

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00181 Published 2025-04-07 No fix listed CWE-190
Priority LOW 37

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00182 Published 2024-04-02 No fix listed CWE-20
TI-2024-14706 CVE-2024-22098 · GHSA-47g7-w4cj-342g

AVSession has a use after free vulnerability

Priority LOW 37

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00187 Published 2024-04-02 No fix listed CWE-416
Priority LOW 36

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00169 Published 2024-11-05 No fix listed CWE-787
TI-2024-31719 CVE-2024-47404 · GHSA-8vp8-pgp2-hm65

Liteos_a has a double free vulnerability

Priority LOW 36

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00169 Published 2024-11-05 No fix listed CWE-415
Load more
Open these records in search →