CVE-2025-25277

arkcompiler_ets_runtime has a type confusion vulnerability

Published Mar 16, 2026 CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Description

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.

Analysis

Technical impact

The vulnerability is a type confusion in the OpenHarmony arkcompiler ETS runtime. Vendor notes indicate that using an incompatible type allows a local attacker to execute arbitrary code within pre‑installed applications, leading to potential privilege escalation on the device.

Affected Systems

The flaw exists in OpenHarmony 5.0.3, 5.1.0, and all earlier releases prior to 5.1.0. All devices running these versions of the operating system are affected if they contain the default pre‑installed apps.

Risk and Exploitability

The CVSS base score is 6.3, reflecting moderate severity. The EPSS score is below 1% and the issue is not listed in CISA's KEV catalog. The attack vector is strictly local, requiring access to the device and the ability to trigger the type confusion within a pre‑installed application, which limits exploitation to restricted scenarios.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenHarmony

unaffected

Version	Status	Constraints
`v5.0.3`	affected	≤ v5.1.0.x

Configuration 1 [-]

OR	cpe:2.3:o:openatom:openharmony:5.0.3::::-:::
	cpe:2.3:o:openatom:openharmony:5.1.0::::-:::

No data.

Vendor Product Versions

Openharmony

Version	Status	Scheme	Platform
`[v5.0.3,v5.1.0.x]`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Verify the device’s OpenHarmony version (5.0.3, 5.1.0, or earlier).
Apply any vendor‑supplied patch or upgrade to a newer, non‑affected OpenHarmony release.
Temporarily disable or uninstall vulnerable pre‑installed applications until a patch is available.
Continuously monitor OpenHarmony security advisories for updates on this CVE.

Generated by OpenCVE AI on March 17, 2026 at 21:42 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.167% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-11.md

History

Mar 17, 2026 8:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Openatom Openatom openharmony
CPEs		cpe:2.3:o:openatom:openharmony:5.0.3::::-::: cpe:2.3:o:openatom:openharmony:5.1.0::::-:::
Vendors & Products		Openatom Openatom openharmony

Mar 17, 2026 10:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Openharmony Openharmony openharmony
Vendors & Products		Openharmony Openharmony openharmony

Mar 16, 2026 6:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mar 16, 2026 7:30 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.
Title		arkcompiler_ets_runtime has a type confusion vulnerability
Weaknesses		CWE-843
References		https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-11.md
Metrics		cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N'}`