Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OpenHarmony — Vulnerabilities & Security Advisories 177

All 177 CVE vulnerabilities found in OpenHarmony, with AI-generated Chinese analysis, references, and POCs.

This page aggregates OpenHarmony vulnerability disclosures, focusing on software weaknesses in the operating system ecosystem maintained by the open-source community. It collects data on memory corruption, race conditions, and logic flaws found within kernel and middleware components, covering advisories published over the past three years of active development. Readers can use this resource to track how the project addresses critical security flaws, understand common weakness classes in embedded and IoT environments, and review the vulnerability history for specific OpenHarmony modules. The data highlights the iterative nature of the codebase, showing how patches are issued and integrated into release branches. By examining these entries, developers and security teams can identify recurring patterns in defect types, assess the risk exposure of systems running OpenHarmony, and verify that remediations have been properly applied in their deployment stacks. This aggregation serves as a neutral reference for auditing compliance and evaluating the security maturity of the platform without relying on single-vendor communication channels.

Vendor: OpenHarmony

CVE ID Title CVSS Severity Published
CVE-2026-33565 kernel_linux_common_modules has a Race Condition vulnerability CWE-364 3.3 Low 2026-05-19
CVE-2026-28733 filemanagement_storage_service has an use after free vulnerability CWE-416 6.5 Medium 2026-05-19
CVE-2026-27766 multimedia_audio_framework has a Race Condition vulnerability CWE-364 5.5 Medium 2026-05-19
CVE-2026-25850 filemanagement_storage_service has an improper preservation of permissions vulnerability CWE-281 5.5 Medium 2026-05-19
CVE-2026-25781 kernel_liteos_a has an out-of-bounds write vulnerability CWE-787 8.4 High 2026-05-19
CVE-2026-28751 filemanagement_storage_service has an improper input validation vulnerability CWE-20 3.3 Low 2026-05-19
CVE-2026-27781 kernel_liteos_a has an integer overflow vulnerability CWE-190 3.3 Low 2026-05-19
CVE-2026-27648 web_webview has an out-of-bounds write vulnerability CWE-787 8.8 High 2026-05-19
CVE-2026-25110 Sensors_medical_sensor has a NULL pointer dereference vulnerability CWE-476 3.3 Low 2026-05-19
CVE-2026-24792 web_webview has a Race Condition vulnerability CWE-364 8.1 High 2026-05-19
CVE-2025-6969 ability_ability_runtime an improper input validation vulnerability CWE-20 5.0 Medium 2026-03-16
CVE-2025-26474 communication_ipc an improper input validation vulnerability CWE-20 3.3 Low 2026-03-16
CVE-2025-52458 arkcompiler_ets_runtime has an out-of-bounds write vulnerability CWE-787 5.5 Medium 2026-03-16
CVE-2025-41432 arkcompiler_ets_runtime has an out-of-bounds write vulnerability CWE-787 5.5 Medium 2026-03-16
CVE-2025-25277 arkcompiler_ets_runtime has a type confusion vulnerability CWE-843 6.3 Medium 2026-03-16
CVE-2025-12736 multimedia_audio_standard has an insecure storage of sensitive information vulnerability CWE-908 6.5 Medium 2026-03-16
CVE-2026-0639 liteos_a has a missing release of memory vulnerability CWE-401 3.3 Low 2026-03-16
CVE-2025-27562 communication_dsoftbus has a missing release of memory vulnerability CWE-401 3.3 Low 2025-08-11
CVE-2025-27128 liteos_a has an UAF vulnerability CWE-416 8.4 High 2025-08-11
CVE-2025-25212 pasteboard has an improper input vulnerability CWE-20 3.3 Low 2025-08-11
CVE-2025-24844 communication_dsoftbus has a missing release of memory vulnerability CWE-401 3.3 Low 2025-08-11
CVE-2025-27536 arkcompiler_ets_runtime has a type confusion vulnerability CWE-843 3.3 Low 2025-08-11
CVE-2025-26690 communication dsoftbus has a NULL pointer vulnerability CWE-476 3.3 Low 2025-08-11
CVE-2025-24925 applications_settings has a missing release of memory vulnerability CWE-401 3.3 Low 2025-08-11
CVE-2025-24298 liteos_a has an UAF vulnerability CWE-416 8.4 High 2025-08-11
CVE-2025-25278 liteos_a has a race condition vulnerability CWE-362 8.4 High 2025-08-11
CVE-2025-27577 liteos_a has a race condition vulnerability CWE-362 8.4 High 2025-08-11
CVE-2025-27247 Pasteboard has an improper preservation of permissions vulnerability CWE-281 5.5 Medium 2025-06-08
CVE-2025-27242 Ssecurity_component_manager has an improper input vulnerability CWE-20 3.3 Low 2025-06-08
CVE-2025-27563 security_access_token has an improper preservation of permissions vulnerability CWE-281 3.3 Low 2025-06-08

All 177 known CVE vulnerabilities affecting OpenHarmony with full Chinese analysis, references, and POCs where available.