Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OpenHarmony — Vulnerabilities & Security Advisories 177

All 177 CVE vulnerabilities found in OpenHarmony, with AI-generated Chinese analysis, references, and POCs.

This page aggregates OpenHarmony vulnerability disclosures, focusing on software weaknesses in the operating system ecosystem maintained by the open-source community. It collects data on memory corruption, race conditions, and logic flaws found within kernel and middleware components, covering advisories published over the past three years of active development. Readers can use this resource to track how the project addresses critical security flaws, understand common weakness classes in embedded and IoT environments, and review the vulnerability history for specific OpenHarmony modules. The data highlights the iterative nature of the codebase, showing how patches are issued and integrated into release branches. By examining these entries, developers and security teams can identify recurring patterns in defect types, assess the risk exposure of systems running OpenHarmony, and verify that remediations have been properly applied in their deployment stacks. This aggregation serves as a neutral reference for auditing compliance and evaluating the security maturity of the platform without relying on single-vendor communication channels.

Vendor: OpenHarmony

CVE ID Title CVSS Severity Published
CVE-2025-22847 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability CWE-125 3.3 Low 2025-03-04
CVE-2025-22841 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability CWE-125 3.3 Low 2025-03-04
CVE-2025-22837 Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability CWE-476 3.3 Low 2025-03-04
CVE-2025-22835 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability CWE-787 3.8 Low 2025-03-04
CVE-2025-22443 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability CWE-125 3.3 Low 2025-03-04
CVE-2025-21098 Liteos-A has an insecure storage of sensitive information vulnerability CWE-922 5.5 Medium 2025-03-04
CVE-2025-21097 Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability CWE-476 3.3 Low 2025-03-04
CVE-2025-21089 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability CWE-125 3.3 Low 2025-03-04
CVE-2025-21084 Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability CWE-476 3.8 Low 2025-03-04
CVE-2025-20626 Arkcompiler Ets Runtime has an UAF vulnerability CWE-416 3.8 Low 2025-03-04
CVE-2025-20091 Communication Dsoftbus has an UAF vulnerability CWE-416 3.8 Low 2025-03-04
CVE-2025-20081 Communication Dsoftbus has an UAF vulnerability CWE-416 3.8 Low 2025-03-04
CVE-2025-20042 Liteos-A has an out of bounds read vulnerability CWE-125 5.5 Medium 2025-03-04
CVE-2025-20024 Arkcompiler Ets Runtime has an integer overflow vulnerability CWE-190 3.8 Low 2025-03-04
CVE-2025-20021 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability CWE-125 3.3 Low 2025-03-04
CVE-2025-20011 Communication Dsoftbus has a memory leak vulnerability CWE-401 3.3 Low 2025-03-04
CVE-2025-0587 Arkcompiler Ets Runtime has an integer overflow vulnerability CWE-190 3.8 Low 2025-03-04
CVE-2025-0304 Liteos_a has an use after free vulnerability CWE-416 8.8 High 2025-02-07
CVE-2025-0303 Liteos_a has a buffer overflow vulnerability CWE-120 8.8 High 2025-02-07
CVE-2025-0302 Liteos_a has an integer overflow read vulnerability CWE-190 5.5 Medium 2025-02-07
CVE-2024-54030 Communication_dsoftbus has an UAF vulnerability CWE-416 4.4 Medium 2025-01-07
CVE-2024-47398 Liteos_a has an out-of-bounds write vulnerability CWE-787 8.8 High 2025-01-07
CVE-2024-45070 Liteos_a has an out-of-bounds read vulnerability CWE-125 5.5 Medium 2025-01-07
CVE-2024-9978 Liteos_a has an out-of-bounds read vulnerability CWE-125 5.5 Medium 2024-12-03
CVE-2024-12082 Ability Runtime has an out-of-bounds read permission bypass vulnerability CWE-125 5.5 Medium 2024-12-03
CVE-2024-10074 Liteos_a has an use after free vulnerability CWE-416 8.8 High 2024-12-03
CVE-2024-47402 Liteos_a has an Out-of-bounds Read vulnerability CWE-125 3.3 Low 2024-11-05
CVE-2024-47137 Liteos_a has an out-of-bounds Write vulnerability CWE-787 8.4 High 2024-11-05
CVE-2024-47404 Liteos_a has a double free vulnerability CWE-415 8.4 High 2024-11-05
CVE-2024-47797 Liteos_a has an out-of-bounds Write vulnerability CWE-787 8.4 High 2024-11-05

All 177 known CVE vulnerabilities affecting OpenHarmony with full Chinese analysis, references, and POCs where available.