CVE-2025-26474

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.
Configurations

Configuration 1 (hide)

cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:*

History

17 Jun 2026, 09:01

Type Values Removed Values Added
Summary
  • (es) En OpenHarmony v5.0.3 y versiones anteriores permiten a un atacante local provocar una entrada de información indebida. Esta vulnerabilidad puede ser explotada solo en escenarios restringidos.

17 Mar 2026, 19:57

Type Values Removed Values Added
First Time Openatom
Openatom openharmony
CPE cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:*
References () https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-09.md - () https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-09.md - Vendor Advisory

16 Mar 2026, 14:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-16 14:17

Updated : 2026-06-17 09:01


NVD link : CVE-2025-26474

Mitre link : CVE-2025-26474

CVE.ORG link : CVE-2025-26474


JSON object : View

Products Affected

openatom

  • openharmony
CWE
CWE-20

Improper Input Validation