VYPR

Vendor CVEs

Openatom

All CVEs

106 total · sorted by risk
  • CVE-2023-49135MedJan 2, 2024
    risk 0.26cvss 4.0epss 0.00

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

  • CVE-2023-48360MedJan 2, 2024
    risk 0.26cvss 4.0epss 0.00

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

  • CVE-2023-47857MedJan 2, 2024
    risk 0.26cvss 4.0epss 0.00

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.

  • CVE-2023-47217MedNov 20, 2023
    risk 0.26cvss 4.0epss 0.00

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow.

  • CVE-2025-27132LowMay 6, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-24309LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-24301LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-23414LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-23409LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-22835LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-21084LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-20626LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-20091LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-20081LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2025-20024LowMar 4, 2025
    risk 0.25cvss 3.8epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

  • CVE-2023-4753LowSep 21, 2023
    risk 0.25cvss 3.9epss 0.00

    OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the error input.

  • CVE-2025-27562LowAug 11, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

  • CVE-2025-27536LowAug 11, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.

  • CVE-2025-26690LowAug 11, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • CVE-2025-25212LowAug 11, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.

  • CVE-2025-24925LowAug 11, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

  • CVE-2025-24844LowAug 11, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

  • CVE-2025-27563LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

  • CVE-2025-27242LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

  • CVE-2025-26693LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

  • CVE-2025-25217LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • CVE-2025-23235LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • CVE-2025-21082LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

  • CVE-2025-20063LowJun 8, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

  • CVE-2025-27248LowMay 6, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • CVE-2025-27241LowMay 6, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • CVE-2025-25218LowMay 6, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • CVE-2025-25052LowMay 6, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.

  • CVE-2025-22886LowMay 6, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

  • CVE-2025-20102LowApr 7, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • CVE-2025-23418LowMar 4, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • CVE-2025-21097LowMar 4, 2025
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

  • CVE-2024-47402LowNov 5, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • CVE-2024-45382LowOct 8, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.

  • CVE-2024-43697LowOct 8, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input.

  • CVE-2024-28044LowSep 2, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow.

  • CVE-2024-36278LowJul 2, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  • CVE-2024-31071LowJul 2, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  • CVE-2024-3757LowMay 7, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

  • CVE-2024-31078LowMay 7, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.

  • CVE-2024-29086LowApr 2, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

  • CVE-2024-21834LowApr 2, 2024
    risk 0.21cvss 3.3epss 0.00

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

  • CVE-2023-49602LowMar 4, 2024
    risk 0.19cvss 2.9epss 0.00

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

  • CVE-2023-25176LowMar 4, 2024
    risk 0.19cvss 2.9epss 0.00

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • CVE-2024-21851LowFeb 2, 2024
    risk 0.19cvss 2.9epss 0.00

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.