Vulnerabilities > Openatom

DATE CVE VULNERABILITY TITLE RISK
2024-05-07 CVE-2024-3758 Out-of-bounds Write vulnerability in Openatom Openharmony
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.
local
low complexity
openatom CWE-787
7.8
2024-05-07 CVE-2024-3759 Use After Free vulnerability in Openatom Openharmony
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.
local
low complexity
openatom CWE-416
7.8
2024-04-02 CVE-2024-21834 Type Confusion vulnerability in Openatom Openharmony
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.
local
low complexity
openatom CWE-843
5.5
2024-04-02 CVE-2024-22092 Authentication Bypass by Spoofing vulnerability in Openatom Openharmony
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.
network
low complexity
openatom CWE-290
7.4
2024-04-02 CVE-2024-22098 Use After Free vulnerability in Openatom Openharmony
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.
local
low complexity
openatom CWE-416
8.8
2024-04-02 CVE-2024-22177 Improper Preservation of Permissions vulnerability in Openatom Openharmony
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission.
local
low complexity
openatom CWE-281
5.5
2024-04-02 CVE-2024-22180 Use After Free vulnerability in Openatom Openharmony
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free.
local
low complexity
openatom CWE-416
5.5
2024-04-02 CVE-2024-24581 Out-of-bounds Write vulnerability in Openatom Openharmony
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write.
local
low complexity
openatom CWE-787
7.8
2024-04-02 CVE-2024-28226 Unspecified vulnerability in Openatom Openharmony
in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.
network
low complexity
openatom
7.5
2024-04-02 CVE-2024-28951 Use After Free vulnerability in Openatom Openharmony 4.0
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.
local
low complexity
openatom CWE-416
7.8