Vulnerabilidades de OpenHarmony

CVE-2026-33565 Baixa · 3.3 CWE-364 19/05/2026

kernel_linux_common_modules has a Race Condition vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

CVE-2026-28751 Baixa · 3.3 CWE-20 19/05/2026

filemanagement_storage_service has an improper input validation vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

CVE-2026-28733 Média · 6.5 CWE-416 19/05/2026

filemanagement_storage_service has an use after free vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.

CVE-2026-27781 Baixa · 3.3 CWE-190 19/05/2026

kernel_liteos_a has an integer overflow vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

CVE-2026-27766 Média · 5.5 CWE-364 19/05/2026

multimedia_audio_framework has a Race Condition vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.

CVE-2026-27648 Alta · 8.8 CWE-787 19/05/2026

web_webview has an out-of-bounds write vulnerability

in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.

CVE-2026-25850 Média · 5.5 CWE-281 19/05/2026

filemanagement_storage_service has an improper preservation of permissions vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak

CVE-2026-25781 Alta · 8.4 CWE-787 19/05/2026

kernel_liteos_a has an out-of-bounds write vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.

CVE-2026-25110 Baixa · 3.3 CWE-476 19/05/2026

Sensors_medical_sensor has a NULL pointer dereference vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

CVE-2026-24792 Alta · 8.1 CWE-364 19/05/2026

web_webview has a Race Condition vulnerability

in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.

CVE-2026-0639 Média · 5.5 CWE-401 16/03/2026

liteos_a has a missing release of memory vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.

CVE-2025-6969 Média · 5.5 CWE-20 16/03/2026

ability_ability_runtime an improper input validation vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.

CVE-2025-52458 Alta · 7.8 CWE-787 16/03/2026

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVE-2025-41432 Alta · 7.8 CWE-787 16/03/2026

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVE-2025-26474 Baixa · 3.3 CWE-20 16/03/2026

communication_ipc an improper input validation vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.

CVE-2025-25277 Alta · 7.0 CWE-843 16/03/2026

arkcompiler_ets_runtime has a type confusion vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.

CVE-2025-12736 Média · 6.5 CWE-908 16/03/2026

multimedia_audio_standard has an insecure storage of sensitive information vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.