What is the CVSS score of CVE-2025-23234?

CVE-2025-23234 has a CVSS 3.1 base score of 3.3 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openharmony are affected by CVE-2025-23234?

CVE-2025-23234 is a low-severity vulnerability in OpenHarmony (CVSS 3.3). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.

How to fix or mitigate CVE-2025-23234?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Openharmony CVE-2025-23234

LOW

Classic Buffer Overflow (CWE-120)

2025-03-04 scy@openharmony.io

Buffer Overflow Openharmony

3.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:29 vuln.today

CVE Published

Mar 04, 2025 - 04:15 nvd

LOW 3.3

DescriptionCVE.org

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

AnalysisAI

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow. Affected products include: Openatom Openharmony.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.