Reddit NetSec

AlienVault OTX General

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

CVE Database V5

Exploit-DB RSS Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Vulnerability of incomplete verification information in the communication module.
Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54628 is a medium-severity vulnerability identified in Huawei's HarmonyOS, specifically affecting versions 4.0.0 through 5.1.0. The vulnerability is categorized under CWE-118, which pertains to incorrect access of indexable resources, commonly known as a 'Range Error.' This type of flaw arises when a program improperly verifies or handles indices used to access elements within arrays or similar data structures, potentially leading to out-of-bounds access or memory corruption. In this case, the vulnerability stems from incomplete verification of information within the communication module of HarmonyOS. The communication module is critical as it handles data exchange and network interactions. Due to improper validation, an attacker can craft malicious inputs that exploit this range error, causing the system to behave unexpectedly. The primary impact of this vulnerability is on system availability, meaning that successful exploitation could lead to denial-of-service (DoS) conditions, such as crashes or reboots of the affected device. The CVSS v3.1 base score is 5.3, reflecting a medium severity level. The vector string (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) indicates that the attack can be performed remotely over the network without any privileges or user interaction, and it affects only availability without compromising confidentiality or integrity. There are no known exploits in the wild as of the publication date (August 6, 2025), and no patches have been linked yet. The vulnerability's root cause is the incomplete verification of index boundaries in the communication module, which could be exploited by sending specially crafted network packets or messages that trigger the range error, leading to resource exhaustion or system instability. Given the nature of the flaw, it is unlikely to result in code execution or data leakage but can disrupt device operations, impacting user experience and service continuity.

Detailed information about CVE-2025-54628: CWE-118 Incorrect Access of Indexable Resource ('Range Error') in Huawei HarmonyOS affecting Huawei HarmonyOS. Get re

CVE-2025-54628: CWE-118 Incorrect Access of Indexable Resource ('Range Error') in Huawei HarmonyOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54628: CWE-118 Incorrect Access of Indexable Resource ('Range Error') in Huawei HarmonyOS

Vulnerability of uncontrolled system resource applications in the setting module
Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-48902 is a medium-severity vulnerability identified in Huawei's HarmonyOS, affecting multiple versions ranging from 2.0.0 up to 4.3.0. The vulnerability is categorized under CWE-118, which relates to incorrect access of indexable resources, commonly known as a 'Range Error'. This type of flaw typically occurs when an application improperly handles array or buffer indices, leading to out-of-bounds access. In this specific case, the vulnerability exists within the system resource applications of the HarmonyOS setting module. Exploiting this vulnerability could allow an attacker with limited privileges (low privileges) and requiring user interaction to cause a denial-of-service condition, impacting system availability. The CVSS v3.1 score is 6.6, reflecting a medium severity level, with the vector indicating local attack vector (AV:L), high attack complexity (AC:H), low privileges required (PR:L), user interaction required (UI:R), and a scope change (S:C). The impact affects confidentiality and integrity to a low degree but availability is highly impacted. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability's root cause is improper bounds checking or validation when accessing indexable resources, which can cause system instability or crashes when triggered.

Detailed information about CVE-2025-48902: CWE-118 Incorrect Access of Indexable Resource ('Range Error') in Huawei HarmonyOS affecting Huawei HarmonyOS. Get re

CVE-2025-48902: CWE-118 Incorrect Access of Indexable Resource ('Range Error') in Huawei HarmonyOS - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'cwe-118'

Filter Threats

Threats Tagged 'cwe-118'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility