Local Code Execution Vulnerability in OpenHarmony by OpenHarmony

CVE-2025-24301

What is CVE-2025-24301?

OpenHarmony versions v5.0.2 and earlier are susceptible to a local attack vector that enables arbitrary code execution within pre-installed applications. This vulnerability arises from a use after free condition, which can be exploited under specific restricted scenarios. It is essential for users to remain vigilant and implement necessary security measures to mitigate potential risks.

References