CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Lifecycle Timeline
1DescriptionNVD
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.
AnalysisAI
Out-of-bounds write in OpenHarmony v6.0 and earlier enables a local low-privileged attacker to corrupt memory and trigger an unrecoverable denial-of-service condition on affected devices. The flaw was disclosed by the OpenHarmony project itself, and no public exploit identified at time of analysis. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all OpenHarmony v6.0 and earlier deployments and flag those supporting critical operations. Within 7 days: Implement local access controls restricting low-privileged user capabilities and enable alerting for memory-related failures. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-30832
GHSA-7f33-7337-2rhg