PT-2026-25626 · Openharmony+1 · Openharmony

Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2025-52458

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.1.0

Description The software contains a flaw that allows a local attacker to execute arbitrary code within pre-installed applications. This is achieved through an out-of-bounds write condition, but exploitation is limited to specific situations. The vulnerable component is arkcompiler ets runtime.

Recommendations Update to version 5.1.0 or later.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2025-52458

Produtos afetados

Openharmony

Referências · 4

• https://twitter.com/CVEnew/status/2033583693206597637 · Publicação no Twitter
• https://t.me/CVEtracker/47517 · Publicação no Telegram
• https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-10.md · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-52458 · Nota de Segurança