OpenHarmony OpenHarmony vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting OpenHarmony OpenHarmony: 17 record(s), with affected versions and fixes.
CVE-2026-33565
Low · 3.3
CWE-364 May 19, 2026
kernel_linux_common_modules has a Race Condition vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVE-2026-28751
Low · 3.3
CWE-20 May 19, 2026
filemanagement_storage_service has an improper input validation vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVE-2026-28733
Medium · 6.5
CWE-416 May 19, 2026
filemanagement_storage_service has an use after free vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.
CVE-2026-27781
Low · 3.3
CWE-190 May 19, 2026
kernel_liteos_a has an integer overflow vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVE-2026-27766
Medium · 5.5
CWE-364 May 19, 2026
multimedia_audio_framework has a Race Condition vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.
CVE-2026-27648
High · 8.8
CWE-787 May 19, 2026
web_webview has an out-of-bounds write vulnerability
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
CVE-2026-25850
Medium · 5.5
CWE-281 May 19, 2026
filemanagement_storage_service has an improper preservation of permissions vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak
CVE-2026-25781
High · 8.4
CWE-787 May 19, 2026
kernel_liteos_a has an out-of-bounds write vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.
CVE-2026-25110
Low · 3.3
CWE-476 May 19, 2026
Sensors_medical_sensor has a NULL pointer dereference vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVE-2026-24792
High · 8.1
CWE-364 May 19, 2026
web_webview has a Race Condition vulnerability
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
CVE-2026-0639
Medium · 5.5
CWE-401 Mar 16, 2026
liteos_a has a missing release of memory vulnerability
in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.
CVE-2025-6969
Medium · 5.5
CWE-20 Mar 16, 2026
ability_ability_runtime an improper input validation vulnerability
in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.
CVE-2025-52458
High · 7.8
CWE-787 Mar 16, 2026
arkcompiler_ets_runtime has an out-of-bounds write vulnerability
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-41432
High · 7.8
CWE-787 Mar 16, 2026
arkcompiler_ets_runtime has an out-of-bounds write vulnerability
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-26474
Low · 3.3
CWE-20 Mar 16, 2026
communication_ipc an improper input validation vulnerability
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-25277
High · 7.0
CWE-843 Mar 16, 2026
arkcompiler_ets_runtime has a type confusion vulnerability
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-12736
Medium · 6.5
CWE-908 Mar 16, 2026
multimedia_audio_standard has an insecure storage of sensitive information vulnerability
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.