CVE-2025-12736
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
Published Mar 16, 2026 · updated Jun 17, 2026 · openatom openharmony
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2026 · NIST NVD
Detected
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
Jun 17, 2026 · NIST NVD
Updated
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
Affected
- cpe openatom/openharmony5.0.3
Sources
- CVE.orgVulnerability recordCVE-2025-12736
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-12736
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
nvd.nist.gov