CVE-2025-25052

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.

CVE-2025-27132

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

CVE-2025-27241

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

CVE-2025-27248

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

CVE-2025-22886

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

CVE-2025-25218

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.