CVE-2025-27562

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-275635.5in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVE-2025-275655.3An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs.CVE-2025-275667.2Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insCVE-2025-275675.4Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerabiCVE-2025-275685.3An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited CVE-2025-27578.8A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PCVE-2025-275714.3Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to check the "Allow Users to View Archived Channels" configuraCVE-2025-275724.1Exposure of sensitive information during transient execution for some TDX within Ring 0: Hypervisor may allow an information disclosure. AutCVE-2025-275743.6Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnCVE-2025-275755.3An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.CVE-2025-275762.9Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow CVE-2025-275777.0in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.
CVE-2025-27562: Medium severity, CVSS 5.5 | Vulnix