Vulnerabilities > Openatom > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-09-21 CVE-2023-4753 Unspecified vulnerability in Openatom Openharmony
OpenHarmony v3.2.1 and prior version has a system call function usage error.
local
low complexity
openatom
5.5
2023-03-10 CVE-2023-0083 Type Confusion vulnerability in Openatom Openharmony
The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.
local
low complexity
openatom CWE-843
5.5
2023-03-10 CVE-2023-24465 NULL Pointer Dereference vulnerability in Openatom Openharmony
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.
local
low complexity
openatom CWE-476
5.5
2023-03-10 CVE-2023-25947 NULL Pointer Dereference vulnerability in Openatom Openharmony
The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package.
local
low complexity
openatom CWE-476
5.5
2022-10-14 CVE-2022-41686 Out-of-bounds Write vulnerability in multiple products
OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver.
local
low complexity
openharmony openatom CWE-787
4.4