PT-2025-9594 · Unknown · Openharmony

Published 2025-03-04 · Updated 2025-03-04 · CVE-2025-20011

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2

Description The issue allows a local attacker to cause a denial of service (DOS) due to missing release of memory.

Recommendations For versions prior to 5.0.2, update to version 5.0.2 or later to resolve the issue.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2025-20011

Affected Products

Openharmony

References · 5

• https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20011 · Security Note
• https://twitter.com/CVEnew/status/1896781704129577299 · Twitter Post
• https://t.me/cvenotify/113302 · Telegram Post