156 matches found
CVE-2025-27577
CVE-2025-27577 affects OpenHarmony v5.0.3 and earlier where a local attacker can achieve arbitrary code execution via a race condition in the tcb component. The root cause is a race condition that could be exploited locally; no remote vector is described in the provided documents. A remediation i...
CVE-2025-24925
OpenHarmony OpenHarmony OS v5.0.3 and earlier are affected by a local DoS due to a missing release of memory. The root cause is memory not being freed, leading to denial of service when exploited locally. Affected component/details consistently point to a memory-release issue; the publicly availa...
CVE-2025-52458
OpenHarmony is affected: OpenHarmony v5.1.0 and earlier contain an out-of-bounds write vulnerability that enables a local attacker to achieve arbitrary code execution in pre-installed apps, but details on exploit vectors, impacted components, and available fixes are not provided in the supplied d...
CVE-2025-26474
CVE-2025-26474 affects OpenHarmony v5.0.3 and earlier. The issue stems from improper input validation in the communication_ipc pathway, enabling a local attacker to cause information disclosure in restricted scenarios. CVSSv3.1 base score 3.3 (LOW) with LOCAL attack vector, LOW privileges require...
CVE-2025-12736
CVE-2025-12736 affects the OpenHarmony platform, specifically the multimedia_audio_standard component in v5.0.3 and earlier. The root cause is the use of an uninitialized resource, which can enable a local attacker to obtain a case-sensitive leak of sensitive information. The provided metrics ind...