« Volver al listado

CVE-2025-26474

Estado: AnalizadaBaja (3.3)—

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Openatom — Openharmony

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-26474",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-26474",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-03-16T17:22:32.173660Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "scy@openharmony.io",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "scy@openharmony.io",
      "affectedData": [
        {
          "vendor": "OpenHarmony",
          "product": "OpenHarmony",
          "versions": [
            {
              "status": "affected",
              "version": "v5.0.3",
              "versionType": "custom",
              "lessThanOrEqual": "v5.0.3.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-03-16T14:17:57.253",
  "references": [
    {
      "url": "https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-09.md",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "scy@openharmony.io"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "scy@openharmony.io",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios."
    },
    {
      "lang": "es",
      "value": "En OpenHarmony v5.0.3 y versiones anteriores permiten a un atacante local provocar una entrada de información indebida. Esta vulnerabilidad puede ser explotada solo en escenarios restringidos."
    }
  ],
  "lastModified": "2026-06-17T09:01:51.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "191FD913-141A-4354-81C3-96C87D4D7CAE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "scy@openharmony.io"
}