PT-2026-25622 · Openharmony+1 · Openharmony

CVE-2025-12736

·

Publicado

2026-03-16

·

Atualizado

2026-03-16

CVSS v3.1

6.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.4
Description The software contains a flaw that allows a local attacker to potentially leak sensitive, case-sensitive information. This occurs through the use of an uninitialized resource within the multimedia audio standard component.
Recommendations Update to OpenHarmony version 5.0.4 or later.

Correção

Use of Uninitialized Resource

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-908

Identificadores relacionados

CVE-2025-12736

Produtos afetados

Openharmony