CVE-2025-6969 is a Denial of Service (DoS) vulnerability found in OpenHarmony v5.1.0 and prior versions, caused by improper input validation (CWE-20). With a CVSS score of 5.5 (Medium), it allows a local, low-privileged attacker to achieve a high impact on system availability with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, nor are public exploit modules available on platforms like Metasploit or ExploitDB. Community discussion and media coverage are absent, and its exceptionally low EPSS score suggests a minimal likelihood of exploitation in the wild.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.0.3CPE matchmatch criteria | cpe:2.3:o:openatom:openharmony:5.0.3:*:*:*:-:*:*:* | ||
5.1.0CPE matchmatch criteria | cpe:2.3:o:openatom:openharmony:5.1.0:*:*:*:-:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.