openatom records

166 published records for vendor openatom.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 7
With a fix record: 4.8%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

166 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-33640No exploit	After tar_close(), libtar.c releases the memory pointed to by pointer t.openatom · openeuler · CWE-416 Pre-auth Memory safety	Critical9.8	—	0.7%	Dec 19, 2022
39Monitor	CVE-2024-37077No exploit	Arkcompiler Ets Runtime has an out-of-bounds write vulnerabilityopenatom · openharmony · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Jul 2, 2024
39Monitor	CVE-2024-37185No exploit	Arkcompiler Ets Runtime has an out-of-bounds write vulnerabilityopenatom · openharmony · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Jul 2, 2024
39Monitor	CVE-2024-36260No exploit	Arkcompiler Ets Runtime has an out-of-bounds write vulnerabilityopenatom · openharmony · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Jul 2, 2024
39Monitor	CVE-2024-37030No exploit	Arkcompiler Ets Runtime has a use after free vulnerabilityopenatom · openharmony · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Jul 2, 2024
39Monitor	CVE-2024-36243No exploit	Arkcompiler Ets Runtime has an out-of-bounds read vulnerabilityopenatom · openharmony · CWE-125 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Jul 2, 2024
36Monitor	CVE-2021-33643No exploit	An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable feep · libtar · CWE-125 Pre-auth Memory safety	Critical9.1	—	1.7%	Aug 10, 2022
35Monitor	CVE-2024-21860No exploit	Dsoftbus has a use after free vulnerabilityopenatom · openharmony · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.4%	Feb 2, 2024
35Monitor	CVE-2023-45734No exploit	Dsoftbus has an out-of-bounds write vulnerabilityopenatom · openharmony · CWE-787 pre-auth RCE Memory safety	High8.8	—	0.3%	Feb 2, 2024
35Monitor	CVE-2024-22098No exploit	AVSession has a use after free vulnerabilityopenatom · openharmony · CWE-416 RCE Memory safety	High8.8	—	0.2%	Apr 2, 2024
35Monitor	CVE-2024-29074No exploit	Telephony has an improper input validation vulnerabilityopenatom · openharmony · CWE-20 RCE	High8.8	—	0.2%	Apr 2, 2024
35Monitor	CVE-2025-22851No exploit	Liteos_A has an integer overflow vulnerabilityopenatom · openharmony · CWE-190 RCE Memory safety	High8.8	—	0.2%	Apr 6, 2025
35Monitor	CVE-2024-47398No exploit	Liteos_a has an out-of-bounds write vulnerabilityopenatom · openharmony · CWE-787 Memory safety	High8.8	—	0.2%	Jan 7, 2025
32Monitor	CVE-2021-33644No exploit	An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable feep · libtar · CWE-125 Pre-auth Memory safety	High8.1	—	1.4%	Aug 10, 2022
31Monitor	CVE-2021-33645No exploit	The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.feep · libtar · CWE-401 Pre-auth Denial of service	High7.5	—	1.8%	Aug 10, 2022
31Monitor	CVE-2021-33646No exploit	The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.feep · libtar · CWE-401 Pre-auth Denial of service	High7.5	—	1.8%	Aug 10, 2022
31Monitor	CVE-2021-33631No exploit	Kernel crash in EXT4 filesystemopenatom · openeuler · CWE-190 Memory safety	High7.8	—	0.4%	Jan 18, 2024
31Monitor	CVE-2023-6045No exploit	Arkruntime has a type confusion vulnerabilityopenatom · openharmony · CWE-843 RCE	High7.8	—	0.2%	Nov 20, 2023
31Monitor	CVE-2022-44455No exploit	The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.openharmony · openharmony · CWE-120 Local privilege escalation Memory safety	High7.8	—	0.2%	Dec 8, 2022
31Monitor	CVE-2024-38386No exploit	Arkcompiler Ets Runtime has an out-of-bounds write vulnerabilityopenatom · openharmony · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 2, 2024
31Monitor	CVE-2024-3759No exploit	Hmdfs has a use after free vulnerabilityopenatom · openharmony · CWE-416 RCE Memory safety	High7.8	—	0.2%	May 7, 2024
31Monitor	CVE-2024-3758No exploit	Hmdfs has a heap buffer overflow vulnerabilityopenatom · openharmony · CWE-122 RCE Memory safety	High7.8	—	0.2%	May 7, 2024
31Monitor	CVE-2024-27217No exploit	MSDP has a use after free vulnerabilityopenatom · openharmony · CWE-416 RCE Memory safety	High7.8	—	0.2%	May 7, 2024
31Monitor	CVE-2023-43612No exploit	Hiview has an improper preservation of permissions vulnerabilityopenatom · openharmony · CWE-281	High7.8	—	0.2%	Nov 20, 2023
31Monitor	CVE-2024-23808No exploit	Arkcompiler ets frontend has an out-of-bounds read vulnerabilityopenatom · openharmony · CWE-125 RCE Memory safety	High7.8	—	0.2%	May 7, 2024

CVE-2021-33640
39Monitor
After tar_close(), libtar.c releases the memory pointed to by pointer t.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
openatom · openeulerDec 19, 2022
CVE-2024-37077
39Monitor
Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
openatom · openharmonyJul 2, 2024
CVE-2024-37185
39Monitor
Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
openatom · openharmonyJul 2, 2024
CVE-2024-36260
39Monitor
Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
openatom · openharmonyJul 2, 2024
CVE-2024-37030
39Monitor
Arkcompiler Ets Runtime has a use after free vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
openatom · openharmonyJul 2, 2024
CVE-2024-36243
39Monitor
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
openatom · openharmonyJul 2, 2024
CVE-2021-33643
36Monitor
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable
CriticalCVSS 9.1No exploitEPSS 2%
- Pre-auth
- Memory safety
feep · libtarAug 10, 2022
CVE-2024-21860
35Monitor
Dsoftbus has a use after free vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
openatom · openharmonyFeb 2, 2024
CVE-2023-45734
35Monitor
Dsoftbus has an out-of-bounds write vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
openatom · openharmonyFeb 2, 2024
CVE-2024-22098
35Monitor
AVSession has a use after free vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonyApr 2, 2024
CVE-2024-29074
35Monitor
Telephony has an improper input validation vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
openatom · openharmonyApr 2, 2024
CVE-2025-22851
35Monitor
Liteos_A has an integer overflow vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonyApr 6, 2025
CVE-2024-47398
35Monitor
Liteos_a has an out-of-bounds write vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
openatom · openharmonyJan 7, 2025
CVE-2021-33644
32Monitor
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
- Memory safety
feep · libtarAug 10, 2022
CVE-2021-33645
31Monitor
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
feep · libtarAug 10, 2022
CVE-2021-33646
31Monitor
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
feep · libtarAug 10, 2022
CVE-2021-33631
31Monitor
Kernel crash in EXT4 filesystem
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
openatom · openeulerJan 18, 2024
CVE-2023-6045
31Monitor
Arkruntime has a type confusion vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
openatom · openharmonyNov 20, 2023
CVE-2022-44455
31Monitor
The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
openharmony · openharmonyDec 8, 2022
CVE-2024-38386
31Monitor
Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonySep 2, 2024
CVE-2024-3759
31Monitor
Hmdfs has a use after free vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonyMay 7, 2024
CVE-2024-3758
31Monitor
Hmdfs has a heap buffer overflow vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonyMay 7, 2024
CVE-2024-27217
31Monitor
MSDP has a use after free vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonyMay 7, 2024
CVE-2023-43612
31Monitor
Hiview has an improper preservation of permissions vulnerability
HighCVSS 7.8No exploitEPSS 0%
openatom · openharmonyNov 20, 2023
CVE-2024-23808
31Monitor
Arkcompiler ets frontend has an out-of-bounds read vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
openatom · openharmonyMay 7, 2024