CVEs (156)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. |
in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage. |
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |