in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
References
| Link | Resource |
|---|---|
| https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-10.md | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Mar 2026, 19:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:openatom:openharmony:5.1.0:*:*:*:-:*:*:* cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:* |
|
| First Time |
Openatom
Openatom openharmony |
|
| References | () https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-10.md - Vendor Advisory |
16 Mar 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-16 14:17
Updated : 2026-03-17 19:58
NVD link : CVE-2025-52458
Mitre link : CVE-2025-52458
CVE.ORG link : CVE-2025-52458
JSON object : View
Products Affected
openatom
- openharmony
CWE
CWE-787
Out-of-bounds Write