in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.
References
| Link | Resource |
|---|---|
| https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-11.md | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Mar 2026, 19:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-11.md - Vendor Advisory | |
| First Time |
Openatom
Openatom openharmony |
|
| CPE | cpe:2.3:o:openatom:openharmony:5.1.0:*:*:*:-:*:*:* cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:* |
16 Mar 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-16 14:17
Updated : 2026-03-17 19:56
NVD link : CVE-2025-25277
Mitre link : CVE-2025-25277
CVE.ORG link : CVE-2025-25277
JSON object : View
Products Affected
openatom
- openharmony
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')