PatchTheCVE: openharmonyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-0639: in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2026-0639.htmlhttps://patchthecve.com/cve/CVE-2026-0639.htmlWed, 17 Jun 2026 10:11:07 +0000LOW 3.3: in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-6969: in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.https://patchthecve.com/cve/CVE-2025-6969.htmlhttps://patchthecve.com/cve/CVE-2025-6969.htmlWed, 17 Jun 2026 10:02:58 +0000MEDIUM 5.0: in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.CVE-2025-52458: in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-52458.htmlhttps://patchthecve.com/cve/CVE-2025-52458.htmlWed, 17 Jun 2026 09:36:32 +0000MEDIUM 5.5: in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVE-2025-41432: in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-41432.htmlhttps://patchthecve.com/cve/CVE-2025-41432.htmlWed, 17 Jun 2026 09:22:51 +0000MEDIUM 5.5: in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVE-2025-26474: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper inputhttps://patchthecve.com/cve/CVE-2025-26474.htmlhttps://patchthecve.com/cve/CVE-2025-26474.htmlWed, 17 Jun 2026 09:01:51 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.CVE-2025-25277: in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-25277.htmlhttps://patchthecve.com/cve/CVE-2025-25277.htmlWed, 17 Jun 2026 09:00:36 +0000MEDIUM 6.3: in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.CVE-2025-12736: in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use ofhttps://patchthecve.com/cve/CVE-2025-12736.htmlhttps://patchthecve.com/cve/CVE-2025-12736.htmlWed, 17 Jun 2026 08:32:52 +0000MEDIUM 6.5: in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.CVE-2025-27577: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race chttps://patchthecve.com/cve/CVE-2025-27577.htmlhttps://patchthecve.com/cve/CVE-2025-27577.htmlWed, 17 Jun 2026 09:03:49 +0000HIGH 8.4: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.CVE-2025-27562: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2025-27562.htmlhttps://patchthecve.com/cve/CVE-2025-27562.htmlWed, 17 Jun 2026 09:03:48 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-27536: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.https://patchthecve.com/cve/CVE-2025-27536.htmlhttps://patchthecve.com/cve/CVE-2025-27536.htmlWed, 17 Jun 2026 09:03:46 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.CVE-2025-27128: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use afhttps://patchthecve.com/cve/CVE-2025-27128.htmlhttps://patchthecve.com/cve/CVE-2025-27128.htmlWed, 17 Jun 2026 09:03:03 +0000HIGH 8.4: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.CVE-2025-26690: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.https://patchthecve.com/cve/CVE-2025-26690.htmlhttps://patchthecve.com/cve/CVE-2025-26690.htmlWed, 17 Jun 2026 09:02:17 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVE-2025-25278: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race chttps://patchthecve.com/cve/CVE-2025-25278.htmlhttps://patchthecve.com/cve/CVE-2025-25278.htmlWed, 17 Jun 2026 09:00:36 +0000HIGH 8.4: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.CVE-2025-25212: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.https://patchthecve.com/cve/CVE-2025-25212.htmlhttps://patchthecve.com/cve/CVE-2025-25212.htmlWed, 17 Jun 2026 09:00:29 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.CVE-2025-24925: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2025-24925.htmlhttps://patchthecve.com/cve/CVE-2025-24925.htmlWed, 17 Jun 2026 08:59:51 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-24844: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2025-24844.htmlhttps://patchthecve.com/cve/CVE-2025-24844.htmlWed, 17 Jun 2026 08:59:42 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-24298: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use afhttps://patchthecve.com/cve/CVE-2025-24298.htmlhttps://patchthecve.com/cve/CVE-2025-24298.htmlWed, 17 Jun 2026 08:58:30 +0000HIGH 8.4: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.CVE-2025-27563: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.https://patchthecve.com/cve/CVE-2025-27563.htmlhttps://patchthecve.com/cve/CVE-2025-27563.htmlWed, 17 Jun 2026 09:03:48 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVE-2025-27247: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.https://patchthecve.com/cve/CVE-2025-27247.htmlhttps://patchthecve.com/cve/CVE-2025-27247.htmlWed, 17 Jun 2026 09:03:16 +0000MEDIUM 5.5: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVE-2025-27242: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.https://patchthecve.com/cve/CVE-2025-27242.htmlhttps://patchthecve.com/cve/CVE-2025-27242.htmlWed, 17 Jun 2026 09:03:16 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.CVE-2025-27131: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.https://patchthecve.com/cve/CVE-2025-27131.htmlhttps://patchthecve.com/cve/CVE-2025-27131.htmlWed, 17 Jun 2026 09:03:04 +0000MEDIUM 6.1: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.CVE-2025-26693: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.https://patchthecve.com/cve/CVE-2025-26693.htmlhttps://patchthecve.com/cve/CVE-2025-26693.htmlWed, 17 Jun 2026 09:02:18 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVE-2025-26691: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.https://patchthecve.com/cve/CVE-2025-26691.htmlhttps://patchthecve.com/cve/CVE-2025-26691.htmlWed, 17 Jun 2026 09:02:17 +0000MEDIUM 5.5: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVE-2025-25217: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.https://patchthecve.com/cve/CVE-2025-25217.htmlhttps://patchthecve.com/cve/CVE-2025-25217.htmlWed, 17 Jun 2026 09:00:30 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVE-2025-24493: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.https://patchthecve.com/cve/CVE-2025-24493.htmlhttps://patchthecve.com/cve/CVE-2025-24493.htmlWed, 17 Jun 2026 08:59:07 +0000MEDIUM 5.5: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.CVE-2025-23235: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.https://patchthecve.com/cve/CVE-2025-23235.htmlhttps://patchthecve.com/cve/CVE-2025-23235.htmlWed, 17 Jun 2026 08:52:48 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-21082: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.https://patchthecve.com/cve/CVE-2025-21082.htmlhttps://patchthecve.com/cve/CVE-2025-21082.htmlWed, 17 Jun 2026 08:42:34 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2025-20063: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.https://patchthecve.com/cve/CVE-2025-20063.htmlhttps://patchthecve.com/cve/CVE-2025-20063.htmlWed, 17 Jun 2026 08:40:36 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2025-27248: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.https://patchthecve.com/cve/CVE-2025-27248.htmlhttps://patchthecve.com/cve/CVE-2025-27248.htmlWed, 17 Jun 2026 09:03:16 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVE-2025-27241: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.https://patchthecve.com/cve/CVE-2025-27241.htmlhttps://patchthecve.com/cve/CVE-2025-27241.htmlWed, 17 Jun 2026 09:03:16 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVE-2025-27132: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-27132.htmlhttps://patchthecve.com/cve/CVE-2025-27132.htmlWed, 17 Jun 2026 09:03:04 +0000LOW 3.8: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVE-2025-25218: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.https://patchthecve.com/cve/CVE-2025-25218.htmlhttps://patchthecve.com/cve/CVE-2025-25218.htmlWed, 17 Jun 2026 09:00:30 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVE-2025-25052: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.https://patchthecve.com/cve/CVE-2025-25052.htmlhttps://patchthecve.com/cve/CVE-2025-25052.htmlWed, 17 Jun 2026 09:00:12 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.CVE-2025-22886: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2025-22886.htmlhttps://patchthecve.com/cve/CVE-2025-22886.htmlWed, 17 Jun 2026 08:50:46 +0000LOW 3.3: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-27534: in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2025-27534.htmlhttps://patchthecve.com/cve/CVE-2025-27534.htmlWed, 17 Jun 2026 09:03:46 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-25057: in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.https://patchthecve.com/cve/CVE-2025-25057.htmlhttps://patchthecve.com/cve/CVE-2025-25057.htmlWed, 17 Jun 2026 09:00:13 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-24304: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.https://patchthecve.com/cve/CVE-2025-24304.htmlhttps://patchthecve.com/cve/CVE-2025-24304.htmlWed, 17 Jun 2026 08:58:31 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.CVE-2025-22851: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-22851.htmlhttps://patchthecve.com/cve/CVE-2025-22851.htmlWed, 17 Jun 2026 08:50:35 +0000MEDIUM 6.5: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.CVE-2025-22842: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.https://patchthecve.com/cve/CVE-2025-22842.htmlhttps://patchthecve.com/cve/CVE-2025-22842.htmlWed, 17 Jun 2026 08:50:30 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-22452: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.https://patchthecve.com/cve/CVE-2025-22452.htmlhttps://patchthecve.com/cve/CVE-2025-22452.htmlWed, 17 Jun 2026 08:47:27 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-20102: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.https://patchthecve.com/cve/CVE-2025-20102.htmlhttps://patchthecve.com/cve/CVE-2025-20102.htmlWed, 17 Jun 2026 08:40:40 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-24309: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-24309.htmlhttps://patchthecve.com/cve/CVE-2025-24309.htmlWed, 17 Jun 2026 08:58:32 +0000LOW 3.8: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVE-2025-24301: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-24301.htmlhttps://patchthecve.com/cve/CVE-2025-24301.htmlWed, 17 Jun 2026 08:58:31 +0000LOW 3.8: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVE-2025-23420: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-23420.htmlhttps://patchthecve.com/cve/CVE-2025-23420.htmlWed, 17 Jun 2026 08:54:13 +0000LOW 3.8: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVE-2025-23418: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.https://patchthecve.com/cve/CVE-2025-23418.htmlhttps://patchthecve.com/cve/CVE-2025-23418.htmlWed, 17 Jun 2026 08:54:12 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-23414: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-23414.htmlhttps://patchthecve.com/cve/CVE-2025-23414.htmlWed, 17 Jun 2026 08:54:10 +0000LOW 3.8: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVE-2025-23409: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-23409.htmlhttps://patchthecve.com/cve/CVE-2025-23409.htmlWed, 17 Jun 2026 08:54:07 +0000LOW 3.8: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.CVE-2025-23240: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed appshttps://patchthecve.com/cve/CVE-2025-23240.htmlhttps://patchthecve.com/cve/CVE-2025-23240.htmlWed, 17 Jun 2026 08:52:50 +0000LOW 3.8: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVE-2025-23234: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.https://patchthecve.com/cve/CVE-2025-23234.htmlhttps://patchthecve.com/cve/CVE-2025-23234.htmlWed, 17 Jun 2026 08:52:47 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.CVE-2025-22897: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.https://patchthecve.com/cve/CVE-2025-22897.htmlhttps://patchthecve.com/cve/CVE-2025-22897.htmlWed, 17 Jun 2026 08:50:51 +0000LOW 3.3: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.