Approved changes feed: RSS · Atom

cpe:2.3:o:openatom:openharmony:5.1.0:*:*:*:-:*:*:*

part: o version: 5.1.0 update: *

VendorOpenatom (8dab3a48-246c-54aa-822c-3342b5c62878)
ProductOpenharmony (5408e45f-cf4c-5b33-afb8-40d29893a9bf)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitee/openharmony/docs purl2cpe 2026-06-01 10:17:58.399558

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6969 vulnerable 2026-06-08 07:43:16.771053 ability_ability_runtime an improper input validation vulnerability
MEDIUM (5)
in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.
Published: 2026-03-16T07:10:50.482Z
Updated: 2026-03-16T17:21:51.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52458 vulnerable 2026-06-08 07:31:11.633923 arkcompiler_ets_runtime has an out-of-bounds write vulnerability
MEDIUM (5.5)
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
Published: 2026-03-16T07:10:08.700Z
Updated: 2026-03-16T17:23:59.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41432 vulnerable 2026-06-08 07:25:07.056852 arkcompiler_ets_runtime has an out-of-bounds write vulnerability
MEDIUM (5.5)
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
Published: 2026-03-16T07:09:53.417Z
Updated: 2026-03-16T17:25:26.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25277 vulnerable 2026-06-08 07:12:51.082943 arkcompiler_ets_runtime has a type confusion vulnerability
MEDIUM (6.3)
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.
Published: 2026-03-16T07:09:27.788Z
Updated: 2026-03-16T17:27:12.753Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.