OpenHarmony Local Denial-of-Service Vulnerability in LiteOS Memory Management

A denial-of-service vulnerability has been identified in OpenHarmony versions through 6.0. The issue arises from a memory leak that can be exploited by a local attacker, leading to increased resource consumption and potential system instability.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by exhausting system memory, which can lead to application or system crashes.

Remediation

Users can apply the available patches for this vulnerability by merging the corresponding pull requests into their OpenHarmony branches. Instructions for applying these patches can be found in the 'Remediation' section of the OpenHarmony security disclosure for February 2026.