
CVE-2025-23414 – Arkcompiler Ets Runtime has an UAF vulnerability
https://notcve.org/view.php?id=CVE-2025-23414
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-416: Use After Free •

CVE-2025-23409 – Communication Dsoftbus has an UAF vulnerability
https://notcve.org/view.php?id=CVE-2025-23409
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-416: Use After Free •

CVE-2025-23240 – Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
https://notcve.org/view.php?id=CVE-2025-23240
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-787: Out-of-bounds Write •

CVE-2025-22835 – Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
https://notcve.org/view.php?id=CVE-2025-22835
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-787: Out-of-bounds Write •

CVE-2025-21084 – Arkcompiler Ets Runtime has an NULL pointer dereference vulnerability
https://notcve.org/view.php?id=CVE-2025-21084
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-476: NULL Pointer Dereference •

CVE-2025-20626 – Arkcompiler Ets Runtime has an UAF vulnerability
https://notcve.org/view.php?id=CVE-2025-20626
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-416: Use After Free •

CVE-2025-20091 – Communication Dsoftbus has an UAF vulnerability
https://notcve.org/view.php?id=CVE-2025-20091
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-416: Use After Free •

CVE-2025-20081 – Communication Dsoftbus has an UAF vulnerability
https://notcve.org/view.php?id=CVE-2025-20081
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-416: Use After Free •

CVE-2025-20024 – Arkcompiler Ets Runtime has an integer overflow vulnerability
https://notcve.org/view.php?id=CVE-2025-20024
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-190: Integer Overflow or Wraparound •

CVE-2025-0587 – Arkcompiler Ets Runtime has an integer overflow vulnerability
https://notcve.org/view.php?id=CVE-2025-0587
04 Mar 2025 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md • CWE-190: Integer Overflow or Wraparound •