CVE-2025-6969 PUBLISHED

ability_ability_runtime an improper input validation vulnerability

Assigner: OpenHarmony
Reserved: 01.07.2025 Published: 16.03.2026 Updated: 16.03.2026

in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS Score: 5

Product Status

Vendor OpenHarmony
Product OpenHarmony
Versions Default: unaffected
  • affected from v5.0.3 to v5.1.0.x (incl.)

References

Problem Types

  • CWE-20 Improper input validation CWE