GCVE - cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:*

part: o version: 5.0.3 update: *

Vendor	Openatom (`8dab3a48-246c-54aa-822c-3342b5c62878`)
Product	Openharmony (`5408e45f-cf4c-5b33-afb8-40d29893a9bf`)
Edition	*
Language	*
Software edition	-
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:gitee/openharmony/docs`	purl2cpe	2026-06-01 10:17:58.398264

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6969`	vulnerable	2026-06-08 07:43:16.770425	ability_ability_runtime an improper input validation vulnerability MEDIUM (5) in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input. Published: 2026-03-16T07:10:50.482Z Updated: 2026-03-16T17:21:51.294Z Open on db.gcve.eu Reference links https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-09.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52458`	vulnerable	2026-06-08 07:31:11.633024	arkcompiler_ets_runtime has an out-of-bounds write vulnerability MEDIUM (5.5) in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios. Published: 2026-03-16T07:10:08.700Z Updated: 2026-03-16T17:23:59.634Z Open on db.gcve.eu Reference links https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-10.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-41432`	vulnerable	2026-06-08 07:25:07.055694	arkcompiler_ets_runtime has an out-of-bounds write vulnerability MEDIUM (5.5) in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios. Published: 2026-03-16T07:09:53.417Z Updated: 2026-03-16T17:25:26.465Z Open on db.gcve.eu Reference links https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-10.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26474`	vulnerable	2026-06-08 07:12:51.682174	communication_ipc an improper input validation vulnerability LOW (3.3) in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios. Published: 2026-03-16T07:10:37.292Z Updated: 2026-03-16T17:23:18.511Z Open on db.gcve.eu Reference links https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-09.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25277`	vulnerable	2026-06-08 07:12:51.082017	arkcompiler_ets_runtime has a type confusion vulnerability MEDIUM (6.3) in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios. Published: 2026-03-16T07:09:27.788Z Updated: 2026-03-16T17:27:12.753Z Open on db.gcve.eu Reference links https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-11.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12736`	vulnerable	2026-06-08 07:04:30.747581	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.