Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.2%	CVE-2025-54627Huawei HarmonyOS · Out-of-bounds Write High8.8EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54627 Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.2%Vulnerability CWE-787	CVE Database V5	2025-08-06
Medium	6.7	EPSS <0.1%	CVE-2025-54625Huawei HarmonyOS · Missing Lock Check Medium6.7EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54625 Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-414	CVE Database V5	2025-08-06
Medium	4.4	EPSS <0.1%	CVE-2025-54626Huawei HarmonyOS · Use After Free Medium4.4EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54626 Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. EPSS <0.1%Vulnerability CWE-416	CVE Database V5	2025-08-06
Medium	5.7	EPSS 0.2%	CVE-2025-54624Huawei HarmonyOS · Permission Issues Medium5.7EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54624 Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-275	CVE Database V5	2025-08-06
Medium	6.3	EPSS 0.2%	CVE-2025-54623Huawei HarmonyOS · Integer Overflow to Buffer Overflow Medium6.3EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54623 Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-680	CVE Database V5	2025-08-06
High	8.3	EPSS 0.1%	CVE-2025-54622Huawei HarmonyOS · Authentication Bypass by Primary Weakness High8.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54622 Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-305	CVE Database V5	2025-08-06
Medium	5.3	EPSS <0.1%	CVE-2025-54621Huawei HarmonyOS · Improper Control of a Resource Through its Lifetime Medium5.3EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54621 Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures. EPSS <0.1%Vulnerability CWE-664	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-54620Huawei HarmonyOS · Deserialization of Untrusted Data Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54620 Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-502	CVE Database V5	2025-08-06
Medium	5.3	EPSS <0.1%	CVE-2025-54619Huawei HarmonyOS · Improper Control of a Resource Through its Lifetime Medium5.3EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54619 Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability. EPSS <0.1%Vulnerability CWE-664	CVE Database V5	2025-08-06
Medium	5.7	EPSS 0.1%	CVE-2025-54618Huawei HarmonyOS · Permission Issues Medium5.7EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54618 Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-275	CVE Database V5	2025-08-06
Medium	6.8	EPSS 0.3%	CVE-2025-54617Huawei HarmonyOS · Stack-based Buffer Overflow Medium6.8EPSS 0.3%2025-08-06CVE Database V5CVE-2025-54617 Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE. EPSS 0.3%Vulnerability CWE-121	CVE Database V5	2025-08-06
Medium	4.0	EPSS 0.1%	CVE-2025-54616Huawei HarmonyOS · Out-of-bounds Write Medium4.0EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54616 Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-787	CVE Database V5	2025-08-06
Medium	6.2	EPSS 0.1%	CVE-2025-54615Huawei HarmonyOS · Information Exposure Medium6.2EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54615 Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-200	CVE Database V5	2025-08-06
Medium	6.2	EPSS 0.1%	CVE-2025-54614Huawei HarmonyOS · Improper Input Validation Medium6.2EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54614 Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-20	CVE Database V5	2025-08-06
Medium	5.9	EPSS <0.1%	CVE-2025-54613Huawei HarmonyOS · Improper Control of a Resource Through its Lifetime Medium5.9EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54613 Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. EPSS <0.1%Vulnerability CWE-664	CVE Database V5	2025-08-06
Medium	5.9	EPSS <0.1%	CVE-2025-54612Huawei HarmonyOS · Improper Control of a Resource Through its Lifetime Medium5.9EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54612 Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. EPSS <0.1%Vulnerability CWE-664	CVE Database V5	2025-08-06
High	7.3	EPSS 0.1%	CVE-2025-54611Huawei HarmonyOS · Business Logic Errors High7.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54611 EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-840	CVE Database V5	2025-08-06
Medium	5.4	EPSS 0.2%	CVE-2025-54610Huawei HarmonyOS · Improper Validation of Array Index Medium5.4EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54610 Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-129	CVE Database V5	2025-08-06
Medium	5.4	EPSS 0.2%	CVE-2025-54609Huawei HarmonyOS · Out-of-bounds Read Medium5.4EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54609 Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-125	CVE Database V5	2025-08-06
Medium	6.2	EPSS 0.1%	CVE-2025-54608Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium6.2EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54608 Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2025-08-06

Page 12 of 15