CVE-2025-6969CWE-20

ability_ability_runtime an improper input validation vulnerability

Medium · published March 16, 2026

CVSS v3.1
5.0
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-03-16T07:10Z
EPSS history
Timeline
  • 16 MAR 07:10Z
    ability_ability_runtime an improper input validation vulnerability
    cvelistv5