A vulnerability marked as critical has been reported in OpenHarmony up to 5.1.0.x. The impacted element is an unknown function of the component Pre-installed Apps. The manipulation leads to out-of-bounds write.

This vulnerability is referenced as CVE-2025-41432. The attack can only be performed from a local environment. No exploit is available.