High
CVSS 8.4
Overview
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.
CVE-2025-25278
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code e...
Risk analysis
This vulnerability is rated 🟠 HIGH.
- CVSS: 8.4 (HIGH)
- Detected tags: race, rce (tag impact: VERY HIGH)
Recommended actions:
- Patch/upgrade immediately (remote code execution).
- Reduce exposure (WAF/segmentation), minimize attack surface.