CVE-2025-20091 in OpenHarmony

الملخص

بحسب MITRE • 04/03/2025

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: OpenHarmony
• حجز: 20/01/2025
• إفشاء: 04/03/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-298446
• CPE: جاهز
• CWE: CWE-416 (مؤكد)
• CVSS: 3.8 (CNA)
• EPSS: 0.00164
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Police, Homeoffice, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-20091
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-20091
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-20091/