Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.7	EPSS 0.3%	CVE-2025-54607Huawei HarmonyOS · Improper Certificate Validation High7.7EPSS 0.3%2025-08-06CVE Database V5CVE-2025-54607 Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.3%Vulnerability CWE-295	CVE Database V5	2025-08-06
High	7.3	EPSS 0.1%	CVE-2025-54606Huawei HarmonyOS · Business Logic Errors High7.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54606 Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. EPSS 0.1%Vulnerability CWE-840	CVE Database V5	2025-08-06
High	8.1	EPSS <0.1%	CVE-2025-54655Huawei HarmonyOS · Time-of-check Time-of-use (TOCTOU) Race Condition High8.1EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54655 Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module. EPSS <0.1%Vulnerability CWE-367	CVE Database V5	2025-08-06
High	8.4	EPSS 0.1%	CVE-2025-54653Huawei HarmonyOS · Path Traversal High8.4EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54653 Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module. EPSS 0.1%Vulnerability CWE-22	CVE Database V5	2025-08-06
High	8.4	EPSS 0.1%	CVE-2025-54652Huawei HarmonyOS · Path Traversal High8.4EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54652 Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module. EPSS 0.1%Vulnerability CWE-22	CVE Database V5	2025-08-06
Medium	5.9	EPSS 0.1%	CVE-2025-53186Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium5.9EPSS 0.1%2025-07-07CVE Database V5CVE-2025-53186 Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2025-07-07
Medium	6.6	EPSS 0.1%	CVE-2025-53185Huawei HarmonyOS · Use After Free Medium6.6EPSS 0.1%2025-07-07CVE Database V5CVE-2025-53185 Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity. EPSS 0.1%Vulnerability CWE-416	CVE Database V5	2025-07-07
Medium	6.5	EPSS 0.2%	CVE-2025-53184Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.5EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53184 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-07-07
Medium	6.5	EPSS 0.2%	CVE-2025-53183Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.5EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53183 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-07-07
Medium	6.5	EPSS 0.2%	CVE-2025-53182Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.5EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53182 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-07-07
Medium	6.5	EPSS 0.2%	CVE-2025-53181Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.5EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53181 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-07-07
Medium	6.5	EPSS 0.2%	CVE-2025-53180Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.5EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53180 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-07-07
Medium	6.5	EPSS 0.2%	CVE-2025-53179Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.5EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53179 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-07-07
Medium	4.8	EPSS <0.1%	CVE-2025-53178Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium4.8EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53178 Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-07-07
Low	3.9	EPSS <0.1%	CVE-2025-53177Huawei HarmonyOS · Permissions, Privileges, and Access Controls Low3.9EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53177 Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2025-07-07
Low	3.3	EPSS <0.1%	CVE-2025-53176Huawei HarmonyOS · Stack-based Buffer Overflow Low3.3EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53176 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. EPSS <0.1%Vulnerability CWE-121	CVE Database V5	2025-07-07
Medium	4.0	EPSS <0.1%	CVE-2025-53175Huawei HarmonyOS · Stack-based Buffer Overflow Medium4.0EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53175 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. EPSS <0.1%Vulnerability CWE-121	CVE Database V5	2025-07-07
Medium	4.0	EPSS <0.1%	CVE-2025-53174Huawei HarmonyOS · Stack-based Buffer Overflow Medium4.0EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53174 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. EPSS <0.1%Vulnerability CWE-121	CVE Database V5	2025-07-07
Medium	5.3	EPSS 0.2%	CVE-2025-53173Huawei HarmonyOS · Stack-based Buffer Overflow Medium5.3EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53173 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. EPSS 0.2%Vulnerability CWE-121	CVE Database V5	2025-07-07
Medium	4.0	EPSS <0.1%	CVE-2025-53172Huawei HarmonyOS · Stack-based Buffer Overflow Medium4.0EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53172 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. EPSS <0.1%Vulnerability CWE-121	CVE Database V5	2025-07-07

Page 13 of 15