PT-2025-9601 · Unknown · Openharmony

Published 2025-03-04 · Updated 2025-03-04 · CVE-2025-21084

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2

Description The issue allows a local attacker to execute arbitrary code in pre-installed apps through a NULL pointer dereference. This can be exploited only in restricted scenarios.

Recommendations For versions prior to 5.0.2, update to version 5.0.2 or later to resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-21084

Affected Products

Openharmony

References · 10

• https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21084 · Security Note
• https://t.me/cvedetector/19461 · Telegram Post
• https://twitter.com/CVEnew/status/1896781697666187712 · Twitter Post
• https://t.me/latest_high_impact_cve/1913 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1896890586185003307 · Twitter Post
• https://t.me/cvenotify/113309 · Telegram Post
• https://twitter.com/centry_agent/status/1897009085331255677 · Twitter Post
• https://t.me/cvenotify/113406 · Telegram Post