CVE-2025-23414

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-23414

creationtimestamp| type| source ---|---|--- 2025-03-04 04:34:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6321 2025-03-04 05:47:53+00:00| seen| https://t.me/cvedetector/19447 2025-03-04 19:32:30+00:00| seen| Telegram/ncF1gdy4WUeFN2zrjxPbmrb6-nTxYsVpwlgNGTLINsV5vZc...

CVE-2025-23414 Arkcompiler Ets Runtime has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-23414 Arkcompiler Ets Runtime has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-23414

CVE-2025-23414 affects OpenHarmony v5.0.2 and earlier. A use-after-free in pre-installed apps allows a local attacker to achieve arbitrary code execution in a restricted context. The NVD metrics indicate a high impact (C/H, I/H, A/H) with local access, low privileges required, and no user interac...