Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
Low	3.3	EPSS 0.1%	CVE-2025-58290Huawei HarmonyOS · Improper Resolution of Path Equivalence Low3.3EPSS 0.1%2025-10-11CVE Database V5CVE-2025-58290 Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-41	CVE Database V5	2025-10-11
Medium	5.5	EPSS <0.1%	CVE-2025-58288Huawei HarmonyOS · Permission Issues Medium5.5EPSS <0.1%2025-10-11CVE Database V5CVE-2025-58288 Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-275	CVE Database V5	2025-10-11
High	7.8	EPSS 0.1%	CVE-2025-58287Huawei HarmonyOS · Permission Issues High7.8EPSS 0.1%2025-10-11CVE Database V5CVE-2025-58287 Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-275	CVE Database V5	2025-10-11
Low	3.3	EPSS 0.1%	CVE-2025-58286Huawei HarmonyOS · Path Traversal: '/../filedir Low3.3EPSS 0.1%2025-10-11CVE Database V5CVE-2025-58286 Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-25	CVE Database V5	2025-10-11
Medium	5.3	EPSS <0.1%	CVE-2025-58285Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium5.3EPSS <0.1%2025-10-11CVE Database V5CVE-2025-58285 Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-10-11
Medium	5.9	EPSS <0.1%	CVE-2025-58284Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium5.9EPSS <0.1%2025-10-11CVE Database V5CVE-2025-58284 Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-10-11
Medium	5.5	EPSS <0.1%	CVE-2025-58283Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium5.5EPSS <0.1%2025-10-11CVE Database V5CVE-2025-58283 Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-10-11
Low	2.8	EPSS <0.1%	CVE-2025-58282Huawei HarmonyOS · Permissions, Privileges, and Access Controls Low2.8EPSS <0.1%2025-10-11CVE Database V5CVE-2025-58282 Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-10-11
Medium	6.2	EPSS 0.1%	CVE-2025-58278Huawei HarmonyOS · Information Exposure Medium6.2EPSS 0.1%2025-10-11CVE Database V5CVE-2025-58278 Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-200	CVE Database V5	2025-10-11
Medium	4.0	EPSS <0.1%	CVE-2025-58277Huawei HarmonyOS · Information Exposure Medium4.0EPSS <0.1%2025-10-11CVE Database V5CVE-2025-58277 Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-200	CVE Database V5	2025-10-11
Medium	6.2	EPSS <0.1%	CVE-2025-54654Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium6.2EPSS <0.1%2025-10-11CVE Database V5CVE-2025-54654 Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-10-11
Medium	5.1	EPSS <0.1%	CVE-2025-58313Huawei HarmonyOS · Race Condition Medium5.1EPSS <0.1%2025-09-05CVE Database V5CVE-2025-58313 Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device standby module. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2025-09-05
High	7.5	EPSS <0.1%	CVE-2025-58296Huawei HarmonyOS · Race Condition High7.5EPSS <0.1%2025-09-05CVE Database V5CVE-2025-58296 Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2025-09-05
High	8.4	EPSS <0.1%	CVE-2025-58281Huawei HarmonyOS · Out-of-bounds Read High8.4EPSS <0.1%2025-09-05CVE Database V5CVE-2025-58281 Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-09-05
High	8.4	EPSS 0.1%	CVE-2025-58280Huawei HarmonyOS · Prototype Pollution High8.4EPSS 0.1%2025-09-05CVE Database V5CVE-2025-58280 Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-1321	CVE Database V5	2025-09-05
Medium	6.8	EPSS <0.1%	CVE-2025-58276Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium6.8EPSS <0.1%2025-09-05CVE Database V5CVE-2025-58276 Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-09-05
Medium	4.8	EPSS <0.1%	CVE-2025-54651Huawei HarmonyOS · Race Condition Medium4.8EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54651 Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2025-08-06
Medium	4.2	EPSS 0.1%	CVE-2025-54650Huawei HarmonyOS · Improper Validation of Array Index Medium4.2EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54650 Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function. EPSS 0.1%Vulnerability CWE-129	CVE Database V5	2025-08-06
Medium	4.5	EPSS <0.1%	CVE-2025-54649Huawei HarmonyOS · Type Confusion Medium4.5EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54649 Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect. EPSS <0.1%Vulnerability CWE-843	CVE Database V5	2025-08-06
Medium	5.4	EPSS 0.1%	CVE-2025-54648Huawei HarmonyOS · Out-of-bounds Read Medium5.4EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54648 Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-125	CVE Database V5	2025-08-06

Page 10 of 15