CVE-2025-24925

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-25278

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition...

CVE-2025-24844

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-24844

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-24298

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-27562 communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-27562 communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-27128 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-27128

CVE-2025-27128 affects OpenHarmony v5.0.3 and earlier, with a use-after-free in the tcb component allowing a local attacker to execute arbitrary code. The vulnerability path is local with low privileges required and no user interaction, yielding high impact on confidentiality, integrity, and avai...

CVE-2025-27128 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-25212 pasteboard has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input...

CVE-2025-25212

CVE-2025-25212 affects OpenHarmony, with versions v5.0.3 and earlier vulnerable to local DoS due to improper input handling. The issue is a local-attack vector, leading to denial of service as described in multiple sources (e.g., PT-2025-32508). The most concrete remediation is to upgrade to Open...

CVE-2025-25212 pasteboard has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input...

CVE-2025-24844 communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-24844

The CVE-2025-24844 entry involves OpenHarmony, affected in v5.0.3 and earlier. The root cause is a missing release of memory, leading to a local denial-of-service condition (availability impact), as described by multiple sources. Exploitation is local with low attack complexity and low privileges...

CVE-2025-27536

OpenHarmony CVE-2025-27536 affects v5.0.3 and earlier, with a type-confusion vulnerability in arkcompiler_ets_runtime that enables a local attacker to cause a DoS. Impact is denial of service (local access, low privileges) per linked records; recommended remediation is to upgrade to OpenHarmony 5...

CVE-2025-27536 arkcompiler_ets_runtime has a type confusion vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion...

CVE-2025-26690 communication dsoftbus has a NULL pointer vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

CVE-2025-24925

OpenHarmony OpenHarmony OS v5.0.3 and earlier are affected by a local DoS due to a missing release of memory. The root cause is memory not being freed, leading to denial of service when exploited locally. Affected component/details consistently point to a memory-release issue; the publicly availa...

CVE-2025-25278

OpenHarmony CVE-2025-25278 affects OpenHarmony v5.0.3 and earlier due to a race condition in the tcb component that can allow a local attacker to execute arbitrary code. The root cause is a race condition in tcb leading to local code execution with high impact; exploitability is local with no use...