← All advisories

High severity8.4NVD Advisory· Published Aug 11, 2025· Updated Jun 17, 2026

CVE-2025-27128

CVE-2025-27128

Description

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

Affected products

3

Openatom/Openharmony
cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*
Range: <=5.0.3
OpenHarmony/Openharmonyllm-fuzzy2 versions
<=5.0.3+ 1 more
- (no CPE)range: <=5.0.3
- (no CPE)range: v5.0.3

Patches

Vulnerability mechanics

References

1

gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-07.mdnvdVendor Advisory

News mentions

0

No linked articles in our index yet.