CVE-2025-12736: multimedia_audio_standard has an insecure storage of sensitive information vulnerability
Published Mar 16, 2026
·Updated
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
Affected Software
3 affected components
OpenHarmony OpenHarmony<=v5.0.3
multimedia_audio_standard
Openatom Openharmony=5.0.3
Event History
Mar 16, 2026
CVE Published
via MITRE·07:09 AM
Data Sourced
via MITRE·07:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-12736?
CVE-2025-12736 is classified as a medium severity vulnerability.
2
How do I fix CVE-2025-12736?
To address CVE-2025-12736, it is recommended to update OpenHarmony to version 5.0.4 or later.
3
What type of attack can CVE-2025-12736 enable?
CVE-2025-12736 can enable local attackers to leak sensitive information due to insecure storage.
4
Which versions of OpenHarmony are affected by CVE-2025-12736?
OpenHarmony versions v5.0.3 and prior are affected by CVE-2025-12736.
5
What component is involved in CVE-2025-12736?
CVE-2025-12736 involves the multimedia_audio_standard component within OpenHarmony.