Security-bulletin

security@openharmony.io

September 2026

1 participants
1 discussions

2026年09月安全公告
by 王晨 01 Sep '26

01 Sep '26

发布于2026.09.01 备注：OpenHarmony-5.0.3-Release分支当前已停止维护，后续这个分支的安全漏洞也不再维护，详情参见社区公告。 OpenHarmony-5.0.3-Release分支停止维护公告 CVE漏洞描述漏洞影响严重程度CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-67582web_webview 竞争条件漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releaseweb_webview6.0.x 5.1.0.x CVE-2026-67570drivers_peripheral 内存泄露漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasedrivers_peripheral6.0.x 5.1.0.x 6.1.x CVE-2026-67569multimedia_camera_framework 空指针解引用漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v5.1.0-Releasemultimedia_camera_framework5.1.0.x CVE-2026-58309kernel_liteos_a 权限管理不当漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v6.1-Releasekernel_liteos_a6.1.x CVE-2026-68069kernel_liteos_a 权限管理不当漏洞本地攻击者可造成信息泄露中危5.5OpenHarmony-v6.1-Releasekernel_liteos_a6.1.x CVE-2026-59775kernel_liteos_a 权限管理不当漏洞本地攻击者可造成任意代码执行高危7.1OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-54482kernel_liteos_a 越界写漏洞本地攻击者可造成任意代码执行高危7.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-63546kernel_liteos_a 权限管理不当漏洞本地攻击者可造成信息泄露中危5.5OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-68965multimedia_camera_framework UAF漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasemultimedia_camera_framework6.0.x 6.1.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2025-68725无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-39931无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release6.0.x CVE-2025-39913无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release6.0.x CVE-2024-56769中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-56763中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-56694中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-56633无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-39276中危4.8kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-36883高危7kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-27056中危4.3kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.1.xhttps://gitcode.com/openharmony/startup_init/pull/4879 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4880 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4881

1 0