Local Code Execution Vulnerability in OpenHarmony by OpenHarmony

CVE-2025-23420

What is CVE-2025-23420?

OpenHarmony versions up to v5.0.2 are susceptible to a vulnerability that allows local attackers to execute arbitrary code within pre-installed applications through an out-of-bounds write condition. This security weakness can be exploited in specific, limited scenarios, emphasizing the need for users to remain aware of their software installation and potential risks.

References