Vulnerabilities in OpenHarmony

177 results
Vexday analysis

Com 177 CVEs catalogadas e nenhuma entrada no catálogo KEV da CISA, o OpenHarmony apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere menor pressão imediata de agentes maliciosos sobre suas vulnerabilidades. A ausência de CVEs de severidade crítica e de provas de conceito públicas reforça um perfil de risco contido no momento, embora 10 novas CVEs registradas nos últimos 90 dias indiquem atividade contínua de descoberta que merece acompanhamento. O tipo de falha mais frequente é CWE-416 (use-after-free), classe de vulnerabilidade que, por natureza, pode levar a execução de código arbitrário e elevação de privilégios, demandando atenção prioritária em revisões de código e processos de desenvolvimento. A CVE mais relevante no momento, CVE-2024-37185, apresenta EPSS de 0,0062, sinalizando baixa probabilidade de exploração iminente, mas ainda assim deve ser tratada como referência para priorização de mitigações.

CVE-2025-41432MEDIUMarkcompiler_ets_runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2023-46708MEDIUMWlan has a use after free vulnerabilityEPSS 0.2%CVE-2025-0304HIGHLiteos_a has an use after free vulnerabilityEPSS 0.2%CVE-2024-0285MEDIUMDsoftbus has an improper input validation vulnerabilityEPSS 0.2%CVE-2024-47137HIGHLiteos_a has an out-of-bounds Write vulnerabilityEPSS 0.2%CVE-2025-24301LOWArkcompiler Ets Runtime has an UAF vulnerabilityEPSS 0.2%CVE-2025-23420LOWArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2025-23409LOWCommunication Dsoftbus has an UAF vulnerabilityEPSS 0.2%CVE-2024-47404HIGHLiteos_a has a double free vulnerabilityEPSS 0.2%CVE-2025-22835LOWArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2025-20091LOWCommunication Dsoftbus has an UAF vulnerabilityEPSS 0.2%CVE-2025-20626LOWArkcompiler Ets Runtime has an UAF vulnerabilityEPSS 0.2%CVE-2025-23414LOWArkcompiler Ets Runtime has an UAF vulnerabilityEPSS 0.2%CVE-2025-24309LOWArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2025-21098MEDIUMLiteos-A has an insecure storage of sensitive information vulnerabilityEPSS 0.2%CVE-2025-23240LOWArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2024-47797HIGHLiteos_a has an out-of-bounds Write vulnerabilityEPSS 0.2%CVE-2025-21084LOWArkcompiler Ets Runtime has an NULL pointer dereference vulnerabilityEPSS 0.2%CVE-2024-39831MEDIUMAccessTokenManager has an use after free vulnerabilityEPSS 0.2%CVE-2025-12736MEDIUMmultimedia_audio_standard has an insecure storage of sensitive information vulnerabilityEPSS 0.2%