Information Leak in OpenHarmony Versions Prior to 5.0.3

CVE-2025-27247

What is CVE-2025-27247?

OpenHarmony versions prior to 5.0.3 are susceptible to an information leak vulnerability. A local attacker can exploit this flaw to gain unauthorized access to sensitive information by invoking permission queries. The issue stems from inadequate handling of permissions, which may inadvertently expose critical data. Organizations using affected versions should prioritize updates to mitigate risks associated with potential data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References