CVE-20XX-?

Openatom Openharmony CVEs.

Published CVEs affecting Openatom Openharmony, ranked by exploit odds.

73 CVEs · updated 2026-11-06 01:30 UTC

  1. CVE-2024-54030

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free.

    Openatom Openharmony

    4.4 MEDIUM 0.2% exploit odds Fix listed
  2. CVE-2025-0587

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds No fix listed
  3. CVE-2025-22851

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.

    Openatom Openharmony

    6.5 MEDIUM 0.2% exploit odds Fix listed
  4. CVE-2025-41432

    in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    5.5 MEDIUM 0.2% exploit odds Fix listed
  5. CVE-2025-12736

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.

    Openatom Openharmony

    6.5 MEDIUM 0.2% exploit odds Fix listed
  6. CVE-2025-0303

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.

    Openatom Openharmony

    8.8 HIGH 0.2% exploit odds Fix listed
  7. CVE-2025-21098

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.

    Openatom Openharmony

    5.5 MEDIUM 0.2% exploit odds Fix listed
  8. CVE-2025-0304

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

    Openatom Openharmony

    8.8 HIGH 0.2% exploit odds Fix listed
  9. CVE-2025-27132

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds No fix listed
  10. CVE-2025-20091

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  11. CVE-2025-20626

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  12. CVE-2025-21084

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  13. CVE-2025-22835

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  14. CVE-2025-23240

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  15. CVE-2025-23409

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  16. CVE-2025-23414

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  17. CVE-2025-23420

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  18. CVE-2025-24301

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  19. CVE-2025-24309

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  20. CVE-2025-52458

    in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    5.5 MEDIUM 0.2% exploit odds Fix listed
  21. CVE-2026-0639

    in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.

    Openatom Openharmony

    3.3 LOW 0.2% exploit odds Fix listed
  22. CVE-2024-47398

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.

    Openatom Openharmony

    8.8 HIGH 0.2% exploit odds Fix listed
  23. CVE-2025-24298

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

    Openatom Openharmony

    8.4 HIGH 0.2% exploit odds Fix listed
  24. CVE-2025-27128

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

    Openatom Openharmony

    8.4 HIGH 0.2% exploit odds Fix listed
  25. CVE-2025-25277

    in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    6.3 MEDIUM 0.2% exploit odds Fix listed
  26. CVE-2025-6969

    in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.

    Openatom Openharmony

    5.0 MEDIUM 0.2% exploit odds Fix listed
  27. CVE-2025-0302

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.

    Openatom Openharmony

    5.5 MEDIUM 0.2% exploit odds No fix listed
  28. CVE-2025-20024

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  29. CVE-2025-20042

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.

    Openatom Openharmony

    5.5 MEDIUM 0.2% exploit odds Fix listed
  30. CVE-2025-20081

    in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.8 LOW 0.2% exploit odds Fix listed
  31. CVE-2024-45070

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

    Openatom Openharmony

    5.5 MEDIUM 0.2% exploit odds Fix listed
  32. CVE-2025-20102

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  33. CVE-2025-22452

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  34. CVE-2025-22842

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  35. CVE-2025-24304

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  36. CVE-2025-25057

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  37. CVE-2025-27534

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  38. CVE-2025-25052

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds No fix listed
  39. CVE-2025-22886

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds No fix listed
  40. CVE-2025-25218

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds No fix listed
  41. CVE-2025-27241

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds No fix listed
  42. CVE-2025-27248

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds No fix listed
  43. CVE-2025-26474

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  44. CVE-2025-22897

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  45. CVE-2025-23234

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  46. CVE-2025-27131

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

    Openatom Openharmony

    6.1 MEDIUM 0.1% exploit odds Fix listed
  47. CVE-2025-20011

    in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  48. CVE-2025-20021

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  49. CVE-2025-21089

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed
  50. CVE-2025-21097

    in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

    Openatom Openharmony

    3.3 LOW 0.1% exploit odds Fix listed

All CVEs affecting Openatom Openharmony that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.