Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-a17m-hq2e-quhz
Summaryin OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.
Aliases
0
alias CVE-2025-25057
Fixed_packages
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-25057
reference_id
reference_type
scores
0
value 0.00092
scoring_system epss
scoring_elements 0.25831
published_at 2026-06-11T12:55:00Z
1
value 0.00092
scoring_system epss
scoring_elements 0.26031
published_at 2026-06-12T12:55:00Z
2
value 0.00092
scoring_system epss
scoring_elements 0.26046
published_at 2026-06-13T12:55:00Z
3
value 0.00092
scoring_system epss
scoring_elements 0.26032
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-25057
1
reference_url https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md
reference_id 2025-04.md
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-07T14:29:28Z/
url https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md
Weaknesses
0
cwe_id 401
name Missing Release of Memory after Effective Lifetime
description The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
Exploits
Severity_range_score3.3 - 3.3
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-a17m-hq2e-quhz