OpenHarmony 安全漏洞

OpenHarmony is an open-source project for a Harmony operating system developed by the OpenAtom Foundation in China. Versions of OpenHarmony 6.0 and earlier contained security vulnerabilities, allowing attackers to execute arbitrary code in pre-installed applications...

CVE-2025-52458

CVE-2025-52458 affects arkcompiler_ets_runtime in OpenHarmony v5.1.0 and earlier. The flaw is an out-of-bounds write that can enable a local attacker to execute arbitrary code in pre-installed apps, with exploitation limited to restricted scenarios. The description indicates local attack vector a...

CVE-2025-22835

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-20081

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...