Skip to content
OpenAdvisories

Archive

8 June 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 3.3

    Ssecurity_component_manager has an improper input vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

  • Low 3.3

    security_access_token has an improper preservation of permissions vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

  • Low 3.3

    security_access_token has an improper preservation of permissions vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

  • Low 3.3

    arkui_ace_enginehas a NULL pointer dereference vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

  • Low 3.3

    arkcompiler_ets_runtime has an out-of-bounds write vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.

  • Low 3.3
    CVE-2025-21082 Public exploit

    arkui_ace_engine has a type confusion vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

  • Low 3.3

    arkui_ace_engine has a type confusion vulnerability

    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.