Vulnerabilities (CVE)

Filtered by vendor Openatom Subscribe
Total 124 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33656 3 Debian, Linux, Openatom 3 Debian Linux, Linux Kernel, Openeuler 2025-04-02 N/A 6.8 MEDIUM
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
CVE-2021-33631 1 Openatom 1 Openeuler 2025-04-02 N/A 5.5 MEDIUM
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.
CVE-2021-33658 2 Huawei, Openatom 2 Atune, Openeuler 2025-04-02 4.6 MEDIUM 7.8 HIGH
atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.
CVE-2021-33630 1 Openatom 1 Openeuler 2025-04-02 N/A 5.5 MEDIUM
NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.
CVE-2021-33644 3 Fedoraproject, Feep, Openatom 3 Fedora, Libtar, Openeuler 2025-04-02 N/A 8.1 HIGH
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.
CVE-2021-33646 3 Fedoraproject, Feep, Openatom 3 Fedora, Libtar, Openeuler 2025-04-02 N/A 7.5 HIGH
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
CVE-2025-0587 1 Openatom 1 Openharmony 2025-03-11 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.
CVE-2021-33639 1 Openatom 1 Openeuler Kernel 2025-03-04 N/A 7.5 HIGH
REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.
CVE-2025-20042 1 Openatom 1 Openharmony 2025-03-04 N/A 5.5 MEDIUM
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.
CVE-2025-20024 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-20081 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-20021 1 Openatom 1 Openharmony 2025-03-04 N/A 3.3 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2025-21084 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-24309 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-23420 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-24301 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-23414 1 Openatom 1 Openharmony 2025-03-04 N/A 3.8 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
CVE-2025-23418 1 Openatom 1 Openharmony 2025-03-04 N/A 3.3 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2025-0302 1 Openatom 1 Openharmony 2025-02-11 N/A 5.5 MEDIUM
in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.
CVE-2025-0303 1 Openatom 1 Openharmony 2025-02-11 N/A 8.8 HIGH
in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.