Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

OpenHarmony — Vulnerabilities & Security Advisories 177

All 177 CVE vulnerabilities found in OpenHarmony, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities within the OpenHarmony operating system product, categorized by common weakness types and associated tags. It compiles a comprehensive list of identified flaws affecting OpenHarmony, covering reported issues from its initial public release through the present date to ensure historical continuity and current relevance. Visitors can use this resource to track a vendor's advisories, understand a weakness class, or look up a product's vulnerability history in a structured manner. The content is organized to help developers, security researchers, and system integrators quickly locate specific defects that may impact system stability, confidentiality, or integrity. By centralizing these data points, the page serves as a reference for assessing risk exposure and planning mitigation strategies. It does not include unconfirmed rumors or speculative findings, focusing solely on verified entries that have been documented in official channels or recognized security databases. The aggregation aims to provide clarity on the security posture of OpenHarmony over time, highlighting trends in defect types and their frequency. Users are encouraged to review each entry for detailed technical descriptions, impact assessments, and available patches where applicable. This approach supports informed decision-making during development, auditing, and deployment phases. The information presented is derived from official disclosures and trusted third-party analysis, ensuring accuracy and reliability for professional use cases.

Vendor: OpenHarmony

CVE IDTitleCVSSSeverityPublished
CVE-2026-33565 kernel_linux_common_modules has a Race Condition vulnerability CWE-364 3.3 Low2026-05-19
CVE-2026-28733 filemanagement_storage_service has an use after free vulnerability CWE-416 6.5 Medium2026-05-19
CVE-2026-27766 multimedia_audio_framework has a Race Condition vulnerability CWE-364 5.5 Medium2026-05-19
CVE-2026-25850 filemanagement_storage_service has an improper preservation of permissions vulnerability CWE-281 5.5 Medium2026-05-19
CVE-2026-25781 kernel_liteos_a has an out-of-bounds write vulnerability CWE-787 8.4 High2026-05-19
CVE-2026-28751 filemanagement_storage_service has an improper input validation vulnerability CWE-20 3.3 Low2026-05-19
CVE-2026-27781 kernel_liteos_a has an integer overflow vulnerability CWE-190 3.3 Low2026-05-19
CVE-2026-27648 web_webview has an out-of-bounds write vulnerability CWE-787 8.8 High2026-05-19
CVE-2026-25110 Sensors_medical_sensor has a NULL pointer dereference vulnerability CWE-476 3.3 Low2026-05-19
CVE-2026-24792 web_webview has a Race Condition vulnerability CWE-364 8.1 High2026-05-19
CVE-2025-6969 ability_ability_runtime an improper input validation vulnerability CWE-20 5.0 Medium2026-03-16
CVE-2025-26474 communication_ipc an improper input validation vulnerability CWE-20 3.3 Low2026-03-16
CVE-2025-52458 arkcompiler_ets_runtime has an out-of-bounds write vulnerability CWE-787 5.5 Medium2026-03-16
CVE-2025-41432 arkcompiler_ets_runtime has an out-of-bounds write vulnerability CWE-787 5.5 Medium2026-03-16
CVE-2025-25277 arkcompiler_ets_runtime has a type confusion vulnerability CWE-843 6.3 Medium2026-03-16
CVE-2025-12736 multimedia_audio_standard has an insecure storage of sensitive information vulnerability CWE-908 6.5 Medium2026-03-16
CVE-2026-0639 liteos_a has a missing release of memory vulnerability CWE-401 3.3 Low2026-03-16
CVE-2025-27562 communication_dsoftbus has a missing release of memory vulnerability CWE-401 3.3 Low2025-08-11
CVE-2025-27128 liteos_a has an UAF vulnerability CWE-416 8.4 High2025-08-11
CVE-2025-25212 pasteboard has an improper input vulnerability CWE-20 3.3 Low2025-08-11
CVE-2025-24844 communication_dsoftbus has a missing release of memory vulnerability CWE-401 3.3 Low2025-08-11
CVE-2025-27536 arkcompiler_ets_runtime has a type confusion vulnerability CWE-843 3.3 Low2025-08-11
CVE-2025-26690 communication dsoftbus has a NULL pointer vulnerability CWE-476 3.3 Low2025-08-11
CVE-2025-24925 applications_settings has a missing release of memory vulnerability CWE-401 3.3 Low2025-08-11
CVE-2025-24298 liteos_a has an UAF vulnerability CWE-416 8.4 High2025-08-11
CVE-2025-25278 liteos_a has a race condition vulnerability CWE-362 8.4 High2025-08-11
CVE-2025-27577 liteos_a has a race condition vulnerability CWE-362 8.4 High2025-08-11
CVE-2025-27247 Pasteboard has an improper preservation of permissions vulnerability CWE-281 5.5 Medium2025-06-08
CVE-2025-27242 Ssecurity_component_manager has an improper input vulnerability CWE-20 3.3 Low2025-06-08
CVE-2025-27563 security_access_token has an improper preservation of permissions vulnerability CWE-281 3.3 Low2025-06-08

All 177 known CVE vulnerabilities affecting OpenHarmony with full Chinese analysis, references, and POCs where available.