Openatom Security Vulnerabilities (CVEs)

This vulnerability allows a local attacker to execute arbitrary code with Trusted Computing Base (TCB) privileges through a race condition in OpenHarm...

CVE-2025-27128 is a use-after-free vulnerability in OpenHarmony's tcb (Trusted Computing Base) component that allows local attackers to execute arbitr...

This vulnerability allows a local attacker to execute arbitrary code with elevated privileges (in the Trusted Computing Base) through a race condition...

This vulnerability in OpenHarmony allows a local attacker to bypass permission checks and access sensitive information they shouldn't have access to. ...

This CVE describes an improper input validation vulnerability in OpenHarmony that allows a local attacker to cause a denial of service (DoS) condition...

This vulnerability in OpenHarmony allows a local attacker to bypass permission checks and access sensitive information they shouldn't have access to. ...

This CVE describes a race condition vulnerability in OpenHarmony that allows local attackers to cause information leaks. The vulnerability affects Ope...

This vulnerability allows a local attacker to execute arbitrary code in pre-installed apps on OpenHarmony devices through an integer overflow. It affe...

This vulnerability in OpenHarmony allows a local attacker to bypass permission checks and perform out-of-bounds reads, potentially leaking sensitive i...

This vulnerability in OpenHarmony allows a local attacker to read memory beyond intended boundaries, potentially exposing sensitive information. It af...

An integer overflow vulnerability in OpenHarmony v4.1.2 and earlier allows local attackers to cause denial of service (DoS) by triggering system crash...

A buffer overflow vulnerability in OpenHarmony v4.1.2 and earlier allows local attackers to escalate common permissions to root privileges and leak se...

This CVE describes a use-after-free vulnerability in OpenHarmony that allows a local attacker to escalate common permissions to root privileges and le...

This vulnerability in OpenHarmony allows a local attacker to perform an out-of-bounds write that can cause the device to become unbootable. It affects...

This CVE describes a use-after-free vulnerability in OpenHarmony v4.1.2 and earlier versions that allows a local attacker to cause a denial of service...

CVE-2024-9978 is an out-of-bounds read vulnerability in OpenHarmony that allows a local attacker to read memory beyond allocated buffers, potentially ...

This CVE describes a use-after-free vulnerability in OpenHarmony that allows a local attacker to escalate privileges from common user permissions to r...

This vulnerability in OpenHarmony allows a local attacker to read memory beyond intended boundaries, potentially exposing sensitive information. It af...

This CVE describes a use-after-free vulnerability in OpenHarmony v4.1.0 that allows a local attacker with high privileges to execute arbitrary code in...

CVE-2024-39775 is an out-of-bounds read vulnerability in OpenHarmony that allows remote attackers to cause information leaks. This affects OpenHarmony...

This vulnerability allows a local attacker to execute arbitrary code in pre-installed apps on OpenHarmony devices through an out-of-bounds write. It a...

This CVE describes a use-after-free vulnerability in OpenHarmony that allows a local attacker to escalate common permissions to root and leak sensitiv...

This vulnerability in OpenHarmony allows a local attacker to read memory beyond intended boundaries, potentially exposing sensitive information. It af...

This vulnerability allows a local attacker to execute arbitrary code in pre-installed applications on OpenHarmony devices through an out-of-bounds wri...

This vulnerability allows remote attackers to execute arbitrary code in pre-installed applications on OpenHarmony devices through an out-of-bounds wri...

This vulnerability in OpenHarmony allows remote attackers to execute arbitrary code in pre-installed applications through out-of-bounds memory operati...

CVE-2024-37030 is a use-after-free vulnerability in OpenHarmony v4.0.0 and earlier that allows remote attackers to execute arbitrary code in pre-insta...

This vulnerability allows a local attacker to execute arbitrary code with Trusted Computing Base (TCB) privileges through a heap buffer overflow in Op...

CVE-2024-27217 is a use-after-free vulnerability in OpenHarmony v4.0.0 and earlier that allows local attackers to execute arbitrary code within pre-in...

CVE-2024-28226 is an improper input validation vulnerability in OpenHarmony that allows remote attackers to cause denial of service (DoS) by sending s...

This vulnerability in OpenHarmony allows remote attackers to bypass permission verification and install applications without proper authorization, tho...

CVE-2024-21860 is a use-after-free vulnerability in OpenHarmony v4.0.0 and earlier that allows an adjacent attacker to execute arbitrary code in any a...

CVE-2023-43612 is a local privilege escalation vulnerability in OpenHarmony that allows attackers to read and write arbitrary files due to improper pe...

This vulnerability in OpenHarmony allows a local attacker to access confidential information or modify sensitive files due to incorrect default permis...

A use-after-free vulnerability in OpenHarmony's kernel subsystem allows local attackers to escalate privileges to root. This affects OpenHarmony versi...