CVE-2025-20091 in OpenHarmony

Riassunto

di MITRE • 04/03/2025

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: OpenHarmony
• Prenotare: 20/01/2025
• Divulgazione: 04/03/2025
• Moderazione: accettato
• Voce: VDB-298446
• CPE: pronto
• CWE: CWE-416 (confermato)
• CVSS: 3.8 (CNA)
• EPSS: 0.00164
• KEV: no
• Attività: molto basso
• Settore: Finance, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-20091
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-20091
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-20091/