CVE-2025-52458 — arkcompiler_ets_runtime has an out-of-bounds write vulnerability

CVE-2025-52458

arkcompiler_ets_runtime has an out-of-bounds write vulnerability PUBLISHED

Description (CNA)

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

Affected (CNA)

Vendor / product	Versions
OpenHarmony / OpenHarmony	affected v5.0.3 through v5.1.0.x

CWE

CWE-787

References

https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-10.md

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.