OpenHarmony Information Leak Vulnerability in Multimedia Audio Framework

Vulnerability

A vulnerability allowing information leakage has been identified in the OpenHarmony operating system, specifically in the multimedia audio framework, in version 6.0 and prior. This vulnerability arises from improper handling of permissions, which could be exploited by a local attacker to access sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users can apply the patch available in the OpenHarmony multimedia audio framework repository, specifically in the pull request linked in the references.

Added: May 19, 2026, 4:44 AM
Updated: May 19, 2026, 4:44 AM

Vulnerability Rating

Custom Algorithm
spread
5.4
impact
2.5
exploitability
2.9
remediation
7.7
relevance
8.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.