CVE-2025-20626 — in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free

Matched remediation archetype

Use-after-free, double free, and expired resource use

This catalog composition supplies bounded fallback guidance. Explicitly reviewed curated workflows load with the complete record below.

Check exposure

• Trace ownership, references, callbacks, asynchronous tasks, and teardown paths around the affected object or resource.
• Identify reachable inputs and timing or state transitions that can release the object while references remain.
• Confirm affected builds, allocators, feature flags, architectures, and process privileges.

Remediate safely

• Apply the maintained ownership or lifetime fix and rebuild all artifacts containing the affected native code.
• Use explicit ownership, safe reference management, cancellation and join semantics, and idempotent teardown.
• Add deterministic lifetime tests plus isolated sanitizer and concurrency coverage for shutdown and error paths.