GCVE - cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*

part: o version: * update: *

Vendor	Openatom (`8dab3a48-246c-54aa-822c-3342b5c62878`)
Product	Openharmony (`5408e45f-cf4c-5b33-afb8-40d29893a9bf`)
Edition	*
Language	*
Software edition	lts
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-24465`	vulnerable	2026-06-08 05:56:05.517921	Communication Wi-Fi subsystem has a null pointer reference vulnerability when receving external data. MEDIUM (5.5) Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash. Published: 2023-03-10T10:45:12.940Z Updated: 2025-03-04T21:17:09.449Z Open on db.gcve.eu Reference links https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0083`	vulnerable	2026-06-08 05:52:04.245357	The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access. MEDIUM (4) The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash. Published: 2023-03-10T10:44:22.877Z Updated: 2025-02-27T21:02:12.734Z Open on db.gcve.eu Reference links https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0036`	vulnerable	2026-06-08 05:52:04.123736	platform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack". MEDIUM (6.5) platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege. Published: 2023-01-09T02:24:08.067Z Updated: 2025-04-09T13:32:40.228Z Open on db.gcve.eu Reference links https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0035`	vulnerable	2026-06-08 05:52:04.123098	softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack". MEDIUM (6.5) softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege. Published: 2023-01-09T02:23:54.999Z Updated: 2025-04-09T14:09:05.707Z Open on db.gcve.eu Reference links https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-45126`	vulnerable	2026-06-08 05:50:35.674362	Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. MEDIUM (4) Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked. Published: 2023-01-09T02:22:23.465Z Updated: 2025-04-09T13:39:52.687Z Open on db.gcve.eu Reference links https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-44455`	vulnerable	2026-06-08 05:49:35.557816	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43662`	vulnerable	2026-06-08 05:49:33.693191	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41802`	vulnerable	2026-06-08 05:48:31.047190	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.