CVE-2026-25110
Deferred Deferred - Pending Action
Local Denial of Service in OpenHarmony v6.0

Publication date: 2026-05-19

Last updated on: 2026-05-19

Assigner: OpenHarmony

Description
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-19
Last Modified
2026-05-19
Generated
2026-06-10
AI Q&A
2026-05-19
EPSS Evaluated
2026-06-08
NVD
CVE-2026-25110
EUVD
EUVD-2026-30824
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
openharmony open_harmony *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in OpenHarmony version 6.0 and earlier, where a local attacker can cause a denial of service (DOS) condition.

Impact Analysis

The impact of this vulnerability is that a local attacker with low privileges can cause a denial of service, potentially disrupting the availability of the affected system.

Compliance Impact

The vulnerability in OpenHarmony v6.0 and prior versions allows a local attacker to cause a denial of service (DOS) but does not impact confidentiality or integrity of data.

Since the vulnerability does not affect data confidentiality or integrity, it is unlikely to directly impact compliance with standards such as GDPR or HIPAA, which primarily focus on protecting personal data privacy and security.

However, availability is a component of some security frameworks, so organizations should consider the potential impact of DOS on system availability in their risk assessments.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-25110. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart