CWE-199 vulnerabilities

CVE-2025-58304 is a medium severity permission control vulnerability in the file management module of Huawei's HarmonyOS versions 5.0.1, 5.1.0, and 6.0.0. Exploiting this flaw requires network access and user interaction but no privileges, potentially allowing attackers to compromise service confidentiality. The vulnerability is categorized under CWE-199 (Information Management Errors), indicating improper handling of sensitive information. While no known exploits are currently in the wild, successful exploitation could lead to unauthorized data disclosure.