Security Vulnerability Report
中文
CVE-2026-0639 CVSS 3.3 LOW

CVE-2026-0639

Published: 2026-03-16 14:18:07
Last Modified: 2026-03-17 15:40:50

Description

in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS Details

CVSS Score
3.3
Severity
LOW
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Configurations (Affected Products)

cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:* - VULNERABLE
OpenHarmony v6.0及所有先前版本
OpenHarmony < 6.0.1 (修复版本)

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
// CVE-2026-0639 PoC - OpenHarmony Memory Leak DoS // This PoC demonstrates the memory leak vulnerability in OpenHarmony // Compile: gcc -o poc_cve2026_0639 poc_cve2026_0639.c #include <stdio.h> #include <stdlib.h> #include <string.h> // Simulate vulnerable function with memory leak void* vulnerable_function() { void* ptr = malloc(1024); // Allocate memory // Vulnerability: Missing free(ptr) in certain code paths // In real vulnerability, this occurs under specific conditions // Simulate conditional leak (actual PoC requires specific trigger) if (1) { // Replace with actual vulnerable condition // Memory leak occurs here - ptr not freed return ptr; } free(ptr); // This path properly frees memory return NULL; } int main(int argc, char* argv[]) { printf("CVE-2026-0639 PoC - OpenHarmony Memory Leak DoS\n"); printf("Target: OpenHarmony <= v6.0\n\n"); int iterations = 10000; if (argc > 1) { iterations = atoi(argv[1]); } printf("Triggering memory leak %d times...\n", iterations); for (int i = 0; i < iterations; i++) { void* leaked_mem = vulnerable_function(); if (i % 1000 == 0) { printf("Iteration %d: Leaked %d bytes total\n", i, i * 1024); } } printf("\nMemory exhaustion complete.\n"); printf("System should now exhibit DoS symptoms.\n"); return 0; } // Note: This is a simplified PoC for demonstration. // Actual exploitation requires identifying the specific vulnerable // code path in OpenHarmony system components. // Refer to: https://nvd.nist.gov/vuln/detail/CVE-2026-0639

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-0639", "sourceIdentifier": "[email protected]", "published": "2026-03-16T14:18:07.000", "lastModified": "2026-03-17T15:40:50.177", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory."}, {"lang": "es", "value": "en OpenHarmony v6.0 y versiones anteriores permiten a un atacante local causar DoS debido a la falta de liberación de memoria."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}, "exploitabilityScore": 1.8, "impactScore": 1.4}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-401"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*", "versionStartIncluding": "5.0.3", "versionEndIncluding": "6.0", "matchCriteriaId": "68971496-ED94-430E-9268-D0E1234256F1"}]}]}], "references": [{"url": "https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2026/2026-02.md", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}