Vulnerabilidades en OpenHarmony

177 resultados
CVE-2024-41157HIGHLiteos-A has an use after free vulnerabilityEPSS 0.2%CVE-2023-42774MEDIUMLiteos-A has a incorrect default permissions vulnerabilityEPSS 0.2%CVE-2024-22098MEDIUMAVSession has a use after free vulnerabilityEPSS 0.2%CVE-2022-45126MEDIUMKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.EPSS 0.2%CVE-2022-43662MEDIUMKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime.EPSS 0.2%CVE-2023-3116HIGHLiteos-A has a incorrect default permissions vulnerabilityEPSS 0.2%CVE-2022-38064MEDIUMwindowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.EPSS 0.2%CVE-2024-54030MEDIUMCommunication_dsoftbus has an UAF vulnerabilityEPSS 0.2%CVE-2024-29074MEDIUMTelephony has an improper input validation vulnerabilityEPSS 0.2%CVE-2024-28951MEDIUMArkcompiler runtime has a use after free vulnerabilityEPSS 0.2%CVE-2024-24581MEDIUMArkcompiler runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2025-0587LOWArkcompiler Ets Runtime has an integer overflow vulnerabilityEPSS 0.2%CVE-2025-22851MEDIUMLiteos_A has an integer overflow vulnerabilityEPSS 0.2%CVE-2023-22436HIGHThe kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.EPSS 0.2%CVE-2022-45118MEDIUMTelephony in communication subsystem sends public events with personal data, but the permission is not set.EPSS 0.2%CVE-2024-21845LOWDsoftbus has an integer overflow vulnerabilityEPSS 0.2%CVE-2025-41432MEDIUMarkcompiler_ets_runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2024-21863MEDIUMDsoftbus has an improper input validation vulnerabilityEPSS 0.2%CVE-2024-39816HIGHArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2022-45877HIGHPIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.EPSS 0.2%