Denial of Service Vulnerability in OpenHarmony Software by OpenHarmony
CVE-2025-25212

5.5MEDIUM

Key Information:

Vendor

Openharmony

Status
Openharmony
Vendor
CVE Published:
11 August 2025

What is CVE-2025-25212?

OpenHarmony versions up to v5.0.3 are susceptible to a denial of service (DoS) attack due to improper input handling. A local attacker can exploit this flaw to disrupt the normal functioning of the software, potentially impacting system performance and availability. This vulnerability highlights the importance of implementing robust input validation to ensure the integrity and reliability of applications built on OpenHarmony.

Affected Version(s)

OpenHarmony v5.0.3

References

https://gitee.com/openharmony/security/blob/master/zh/sec...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.