Local Privilege Escalation Flaw in OpenHarmony by OpenHarmony Foundation

CVE-2025-0304

What is CVE-2025-0304?

A local privilege escalation vulnerability in OpenHarmony versions v4.1.2 and earlier enables an attacker to escalate permissions to root level. This exploitation can lead to sensitive information leakage due to a use after free condition, which occurs when a program continues to use a pointer after the memory it points to has been freed. Proper safeguards and patching are essential to mitigate this risk.

References