Huawei
Monthly
Improper access control in Huawei HarmonyOS memo module allows local, unauthenticated users to bypass authentication and read sensitive memo data, affecting confidentiality and system availability. The vulnerability requires user interaction (UI interaction flag set) and involves high attack complexity, resulting in a CVSS score of 4.1. No public exploit code or active exploitation has been confirmed at time of analysis.
Stack overflow in HarmonyOS media platform allows authenticated local attackers to cause denial of service and potentially achieve limited information disclosure or integrity compromise through malicious user interaction. CVSS 6.1 reflects moderate severity with local attack vector, low complexity, and requirement for user interaction; EPSS and KEV status not provided. No public exploit code or active exploitation confirmed at time of analysis.
Race condition in Huawei HarmonyOS notification service allows local high-privilege attackers to cause limited availability impact through timing-dependent exploitation. CVSS 1.9 reflects minimal real-world risk due to high attack complexity, elevated privileges, and no confidentiality or integrity effects. No public exploit code or active exploitation confirmed.
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.7 MEDIUM]
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.6 MEDIUM]
Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.8 MEDIUM]
Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.5 MEDIUM]
Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.0 MEDIUM]
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.2 MEDIUM]
Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.4 MEDIUM]
Harmonyos versions up to 5.1.0 is affected by permissions, privileges, and access controls (CVSS 4.0).
Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 4.0 MEDIUM]
Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 6.2 MEDIUM]
Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.1 MEDIUM]
Harmonyos versions up to 5.1.0 is affected by permissions, privileges, and access controls (CVSS 3.3).
Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.8 MEDIUM]
Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.5 MEDIUM]
Harmonyos versions up to 6.0.0 is affected by permissions, privileges, and access controls (CVSS 6.1).
Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.2 MEDIUM]
Harmonyos versions up to 5.1.0 is affected by permissions, privileges, and access controls (CVSS 5.9).
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Harmonyos versions up to 6.0.0 is affected by permissions, privileges, and access controls (CVSS 6.3).
Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.9 MEDIUM]
Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. [CVSS 4.8 MEDIUM]
Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.0 MEDIUM]
Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.8 MEDIUM]
UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.5 MEDIUM]
Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.9 MEDIUM]
Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. [CVSS 6.2 MEDIUM]
Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.0 MEDIUM]
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 6.1 MEDIUM]
Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.8 MEDIUM]
Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function. [CVSS 7.8 HIGH]
Harmonyos versions up to 6.0.0 is affected by permissions, privileges, and access controls (CVSS 5.7).
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.1 MEDIUM]
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 4.7 MEDIUM]
Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.2 MEDIUM]
Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.7 MEDIUM]
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.1 MEDIUM]
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.1 MEDIUM]
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.4 HIGH]
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 6.2 MEDIUM]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.0 HIGH]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.4 HIGH]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.0 HIGH]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.0 HIGH]
CVE-2025-66323 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: fix UAF in hugetlb_handle_userfault The vma_lock and hugetlb_fault_mutex are dropped before handling userfault and reacquire them again after handle_userfault(), but reacquire the vma_lock could lead to UAF[1,2] due to the following race, hugetlb_fault hugetlb_no_page /*unlock vma_lock */ hugetlb_handle_userfault handle_userfault /* unlock mm->mmap_lock*/ vm_mmap_pgoff do_mmap mmap_region munmap_vma_range /* clean old vma */ /* lock vma_lock again <--- UAF */ /* unlock vma_lock */ Since the vma_lock will unlock immediately after hugetlb_handle_userfault(), let's drop the unneeded lock and unlock in hugetlb_handle_userfault() to fix the issue. [1] https://lore.kernel.org/linux-mm/000000000000d5e00a05e834962e@google.com/ [2] https://lore.kernel.org/linux-mm/20220921014457.1668-1-liuzixian4@huawei.com/
Information disclosure in Huawei HarmonyOS 5.0.1, 5.1.0, and 6.0.0 allows a locally installed malicious application to bypass permission checks in the file management module and read files it is not authorized to access. The vulnerability requires a low-privileged local actor (assessed AV:L/PR:L) and impacts confidentiality only; integrity and availability are unaffected. No public exploit has been identified at time of analysis, and EPSS is 0.02% (percentile 5), suggesting low exploitation likelihood; the vendor's CVSS score of 7.5 (AV:N) is not supported by our assessment.
Local attackers who already run low-privileged code on Huawei EMUI 14.0.0-15.0.0 or HarmonyOS 4.0.0-5.1.0 devices can trigger a use-after-free in the USB driver module, causing high confidentiality and availability impact. Exploitation requires an existing on-device foothold (PR:L) and local access only, with no user interaction or network reachability, so remote unauthenticated attacks are not possible. No public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV); EPSS is 0.01% (1st percentile), making this a lower-tier priority.
Vulnerability of improper criterion security check in the call module. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Identity authentication bypass vulnerability in the Gallery app. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the file management module. Rated medium severity (CVSS 4.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the Settings module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Attackers with local low-privileged access to Huawei HarmonyOS 5.1.0 can exploit a configuration defect in the file management module to compromise app data confidentiality and integrity. The vulnerability requires the attacker to already hold on-device privileges (e.g., a malicious third-party app) and does not permit remote exploitation or denial-of-service. No public exploit code or active exploitation has been identified (EPSS 0.01%, 1st percentile), and this is a moderate-severity, low-urgency issue.
Permission control vulnerability in the memory management module. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Denial of service (DoS) vulnerability in the office service. Rated medium severity (CVSS 5.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the Notepad module. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required. No vendor patch available.
DoS vulnerability in the video-related system service module. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the Wi-Fi module. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Out-of-bounds read in Huawei's component driver module allows a locally installed low-privilege application to access invalid memory on affected EMUI 12.0.0 through 15.0.0 and HarmonyOS 2.0.0 through 4.2.0 devices, potentially disclosing sensitive data and causing availability-impacting crashes. The attack requires local code execution with low privileges and no user interaction, so it is not remotely exploitable against a default device; no public exploit has been identified at time of analysis, and EPSS is 0.01% (1st percentile), indicating a moderate rather than urgent priority.
Permission control vulnerability in the App Lock module. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required. No vendor patch available.
Permission control vulnerability in the distributed component. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Local privilege escalation in Huawei HarmonyOS (versions 5.0.1, 5.1.0, and 6.0.0) allows an attacker with low-level privileges to bypass permission controls in the startup recovery module, resulting in high confidentiality and availability impact. Exploitation requires local access and an existing low-privileged foothold (PR:L) but no user interaction; remote exploitation is not possible. No public exploit code or active exploitation has been identified, and the EPSS score is 0.01% (1st percentile), indicating a low likelihood of exploitation at this time.
UAF vulnerability in the screen recording framework module. Rated medium severity (CVSS 6.4). No vendor patch available.
UAF vulnerability in the screen recording framework module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the print module. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Local low-privileged attackers can crash Huawei HarmonyOS 5.0.1 and 5.1.0 by triggering a stack-based buffer overflow (CWE-121) in the device management module, causing availability loss; the CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H indicates authenticated local access is required, with no confidentiality or integrity impact and no code execution path identified. The EPSS score is 0.09% (percentile 0%), and no public exploit code was identified at time of analysis; this is a genuine but low-priority issue, not a high-CVSS scare.
A stack-based buffer overflow in the HarmonyOS package management module allows locally-positioned code running at low privilege to feed crafted input into the component and crash or destabilize it, affecting Huawei HarmonyOS 5.0.1 and 5.1.0 devices. Impact is availability-only (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) - there is no confidentiality or integrity effect and no user interaction is required once the low-privilege foothold is obtained, for example through an installed app. No public exploit code has been identified at time of analysis, EPSS is 0.09% (0th percentile), and the CVE is not listed in CISA KEV; consistent with the independent assessment, this is a genuinely moderate, availability-only issue rather than a top-tier priority.
A stack-based buffer overflow in the sensor service shipped with Huawei HarmonyOS 5.1.0 lets a local attacker who already holds low-level privileges on the device crash or destabilize the service, degrading availability. Exploitation requires local access to the device and the ability to feed crafted input to the sensor service (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so it is confined to the specific 5.1.0 release named in the CPE and carries no confidentiality or integrity impact. There is no evidence of active exploitation (not in CISA KEV), no public exploit code has been identified, and EPSS is negligible at roughly 0.09%, making this a moderate-severity, low-real-risk local availability bug.
Denial of service in Huawei HarmonyOS 5.0.1 and 5.1.0 allows a locally-present, low-privileged application to crash the device's 'office service' by supplying crafted path input that triggers a relative path-traversal condition, degrading availability of the affected service. The attack is local-only (AV:L) and requires the attacker to already hold a low-privilege authenticated context on the device (PR:L), with no user interaction needed (UI:N); there is no confidentiality or integrity impact and no code execution. Risk to most environments is limited: no public exploit identified at time of analysis, EPSS is 0.11% (1st percentile), and the issue is not listed in CISA KEV.
Denial of service in the office service of Huawei HarmonyOS 5.0.1 and 5.1.0 allows local attackers with low-level privileges to crash or degrade the service, impacting availability only. The vulnerability requires local access (AV:L) and no user interaction, with no effect on confidentiality or integrity. No public exploit code or active exploitation has been identified, and the EPSS score is 0.11% (percentile 1%).
Denial of service in the Huawei HarmonyOS office service (shipped with HarmonyOS 5.0.1 and 5.1.0) lets a locally running application with only low-level privileges crash or hang the service, affecting availability with no confidentiality or integrity impact. Exploitation is not remote: the attacker must already have code executing on the device (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, score 5.5), and no user interaction is required once that foothold exists. There is no public exploit identified at time of analysis and EPSS is very low (0.11%, 1st percentile); Huawei documented the issue in its October 2025 consumer security bulletin, so this is a low-to-moderate priority hardening item rather than an emergency.
A local denial-of-service condition in the 'office service' component of Huawei HarmonyOS 5.0.1 and 5.1.0 lets an attacker who already holds a foothold on the device with low-level privileges crash or otherwise render that service unavailable, with no confidentiality or integrity impact. The vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms exploitation is strictly local and requires low privileges, so a locally installed or running app or local account able to reach the office service is sufficient, and no user interaction is needed. Severity is moderate (CVSS 5.5) and the EPSS score is negligible at roughly 0.09% (0th percentile); no public exploit code has been identified and there is no indication of active exploitation. Huawei published an October 2025 consumer security bulletin addressing the affected HarmonyOS releases.
Use-after-free in Huawei HarmonyOS 5.0.1 and 5.1.0 office service allows a locally installed low-privileged app to trigger memory corruption and potentially read confidential data from the service's memory. Exploitation requires local access and low privileges (AV:L/PR:L), with no user interaction (UI:N), and impact is limited to confidentiality (C:H/I:N/A:N) within the same security scope (S:U). No public exploit identified at time of analysis, and EPSS is low at 0.10% (1st percentile).
Denial of service in the office service of Huawei HarmonyOS 5.0.1 and 5.1.0 allows a local attacker with low privileges to make the service unavailable, requiring an existing on-device foothold such as a malicious low-privileged application. The vulnerability is not remotely exploitable and impacts only availability, with no effect on confidentiality or integrity. No public exploit code or active exploitation has been identified, and the EPSS score is very low (0.11%, 1st percentile), indicating minimal real-world urgency.
Bypassing permission verification in the Huawei Camera app on HarmonyOS 5.0.1 and 5.1.0 allows local attackers to disclose confidential information by convincing a user to install or run a malicious application. The flaw is moderate severity (CVSS 5.5) with low EPSS (0.09%) and no public exploit identified at time of analysis; exploitation requires local access and user interaction.
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the balancer tries to balance a migration. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkpoint_list(). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list In shrink_folio_list(), the hwpoisoned folio may be large. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.
Race condition vulnerability in the device standby module. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required. No vendor patch available.
Race condition vulnerability in the audio module. Rated high severity (CVSS 7.5). No vendor patch available.
Out-of-bounds read vulnerability in the runtime interpreter module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Vulnerability of exposing object heap addresses in the Ark eTS module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
EnzoH has an OS command injection vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.
EnzoH has an OS command injection vulnerability. Rated medium severity (CVSS 4.5). No vendor patch available.
Improper access control in Huawei HarmonyOS memo module allows local, unauthenticated users to bypass authentication and read sensitive memo data, affecting confidentiality and system availability. The vulnerability requires user interaction (UI interaction flag set) and involves high attack complexity, resulting in a CVSS score of 4.1. No public exploit code or active exploitation has been confirmed at time of analysis.
Stack overflow in HarmonyOS media platform allows authenticated local attackers to cause denial of service and potentially achieve limited information disclosure or integrity compromise through malicious user interaction. CVSS 6.1 reflects moderate severity with local attack vector, low complexity, and requirement for user interaction; EPSS and KEV status not provided. No public exploit code or active exploitation confirmed at time of analysis.
Race condition in Huawei HarmonyOS notification service allows local high-privilege attackers to cause limited availability impact through timing-dependent exploitation. CVSS 1.9 reflects minimal real-world risk due to high attack complexity, elevated privileges, and no confidentiality or integrity effects. No public exploit code or active exploitation confirmed.
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.7 MEDIUM]
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.6 MEDIUM]
Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.8 MEDIUM]
Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.5 MEDIUM]
Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.0 MEDIUM]
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.2 MEDIUM]
Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.4 MEDIUM]
Harmonyos versions up to 5.1.0 is affected by permissions, privileges, and access controls (CVSS 4.0).
Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 4.0 MEDIUM]
Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 6.2 MEDIUM]
Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.1 MEDIUM]
Harmonyos versions up to 5.1.0 is affected by permissions, privileges, and access controls (CVSS 3.3).
Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.8 MEDIUM]
Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.5 MEDIUM]
Harmonyos versions up to 6.0.0 is affected by permissions, privileges, and access controls (CVSS 6.1).
Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.2 MEDIUM]
Harmonyos versions up to 5.1.0 is affected by permissions, privileges, and access controls (CVSS 5.9).
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.9 MEDIUM]
Harmonyos versions up to 6.0.0 is affected by permissions, privileges, and access controls (CVSS 6.3).
Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.9 MEDIUM]
Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. [CVSS 4.8 MEDIUM]
Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.0 MEDIUM]
Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.8 MEDIUM]
UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.5 MEDIUM]
Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.9 MEDIUM]
Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. [CVSS 6.2 MEDIUM]
Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 4.0 MEDIUM]
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 6.1 MEDIUM]
Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.8 MEDIUM]
Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function. [CVSS 7.8 HIGH]
Harmonyos versions up to 6.0.0 is affected by permissions, privileges, and access controls (CVSS 5.7).
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.1 MEDIUM]
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 4.7 MEDIUM]
Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 6.2 MEDIUM]
Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 5.7 MEDIUM]
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.1 MEDIUM]
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 5.1 MEDIUM]
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.4 HIGH]
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. [CVSS 6.2 MEDIUM]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.0 HIGH]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.4 HIGH]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.0 HIGH]
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. [CVSS 8.0 HIGH]
CVE-2025-66323 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: fix UAF in hugetlb_handle_userfault The vma_lock and hugetlb_fault_mutex are dropped before handling userfault and reacquire them again after handle_userfault(), but reacquire the vma_lock could lead to UAF[1,2] due to the following race, hugetlb_fault hugetlb_no_page /*unlock vma_lock */ hugetlb_handle_userfault handle_userfault /* unlock mm->mmap_lock*/ vm_mmap_pgoff do_mmap mmap_region munmap_vma_range /* clean old vma */ /* lock vma_lock again <--- UAF */ /* unlock vma_lock */ Since the vma_lock will unlock immediately after hugetlb_handle_userfault(), let's drop the unneeded lock and unlock in hugetlb_handle_userfault() to fix the issue. [1] https://lore.kernel.org/linux-mm/000000000000d5e00a05e834962e@google.com/ [2] https://lore.kernel.org/linux-mm/20220921014457.1668-1-liuzixian4@huawei.com/
Information disclosure in Huawei HarmonyOS 5.0.1, 5.1.0, and 6.0.0 allows a locally installed malicious application to bypass permission checks in the file management module and read files it is not authorized to access. The vulnerability requires a low-privileged local actor (assessed AV:L/PR:L) and impacts confidentiality only; integrity and availability are unaffected. No public exploit has been identified at time of analysis, and EPSS is 0.02% (percentile 5), suggesting low exploitation likelihood; the vendor's CVSS score of 7.5 (AV:N) is not supported by our assessment.
Local attackers who already run low-privileged code on Huawei EMUI 14.0.0-15.0.0 or HarmonyOS 4.0.0-5.1.0 devices can trigger a use-after-free in the USB driver module, causing high confidentiality and availability impact. Exploitation requires an existing on-device foothold (PR:L) and local access only, with no user interaction or network reachability, so remote unauthenticated attacks are not possible. No public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV); EPSS is 0.01% (1st percentile), making this a lower-tier priority.
Vulnerability of improper criterion security check in the call module. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Identity authentication bypass vulnerability in the Gallery app. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the file management module. Rated medium severity (CVSS 4.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the Settings module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Attackers with local low-privileged access to Huawei HarmonyOS 5.1.0 can exploit a configuration defect in the file management module to compromise app data confidentiality and integrity. The vulnerability requires the attacker to already hold on-device privileges (e.g., a malicious third-party app) and does not permit remote exploitation or denial-of-service. No public exploit code or active exploitation has been identified (EPSS 0.01%, 1st percentile), and this is a moderate-severity, low-urgency issue.
Permission control vulnerability in the memory management module. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Denial of service (DoS) vulnerability in the office service. Rated medium severity (CVSS 5.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the Notepad module. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required. No vendor patch available.
DoS vulnerability in the video-related system service module. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the Wi-Fi module. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Out-of-bounds read in Huawei's component driver module allows a locally installed low-privilege application to access invalid memory on affected EMUI 12.0.0 through 15.0.0 and HarmonyOS 2.0.0 through 4.2.0 devices, potentially disclosing sensitive data and causing availability-impacting crashes. The attack requires local code execution with low privileges and no user interaction, so it is not remotely exploitable against a default device; no public exploit has been identified at time of analysis, and EPSS is 0.01% (1st percentile), indicating a moderate rather than urgent priority.
Permission control vulnerability in the App Lock module. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required. No vendor patch available.
Permission control vulnerability in the distributed component. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Local privilege escalation in Huawei HarmonyOS (versions 5.0.1, 5.1.0, and 6.0.0) allows an attacker with low-level privileges to bypass permission controls in the startup recovery module, resulting in high confidentiality and availability impact. Exploitation requires local access and an existing low-privileged foothold (PR:L) but no user interaction; remote exploitation is not possible. No public exploit code or active exploitation has been identified, and the EPSS score is 0.01% (1st percentile), indicating a low likelihood of exploitation at this time.
UAF vulnerability in the screen recording framework module. Rated medium severity (CVSS 6.4). No vendor patch available.
UAF vulnerability in the screen recording framework module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission control vulnerability in the print module. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Local low-privileged attackers can crash Huawei HarmonyOS 5.0.1 and 5.1.0 by triggering a stack-based buffer overflow (CWE-121) in the device management module, causing availability loss; the CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H indicates authenticated local access is required, with no confidentiality or integrity impact and no code execution path identified. The EPSS score is 0.09% (percentile 0%), and no public exploit code was identified at time of analysis; this is a genuine but low-priority issue, not a high-CVSS scare.
A stack-based buffer overflow in the HarmonyOS package management module allows locally-positioned code running at low privilege to feed crafted input into the component and crash or destabilize it, affecting Huawei HarmonyOS 5.0.1 and 5.1.0 devices. Impact is availability-only (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) - there is no confidentiality or integrity effect and no user interaction is required once the low-privilege foothold is obtained, for example through an installed app. No public exploit code has been identified at time of analysis, EPSS is 0.09% (0th percentile), and the CVE is not listed in CISA KEV; consistent with the independent assessment, this is a genuinely moderate, availability-only issue rather than a top-tier priority.
A stack-based buffer overflow in the sensor service shipped with Huawei HarmonyOS 5.1.0 lets a local attacker who already holds low-level privileges on the device crash or destabilize the service, degrading availability. Exploitation requires local access to the device and the ability to feed crafted input to the sensor service (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so it is confined to the specific 5.1.0 release named in the CPE and carries no confidentiality or integrity impact. There is no evidence of active exploitation (not in CISA KEV), no public exploit code has been identified, and EPSS is negligible at roughly 0.09%, making this a moderate-severity, low-real-risk local availability bug.
Denial of service in Huawei HarmonyOS 5.0.1 and 5.1.0 allows a locally-present, low-privileged application to crash the device's 'office service' by supplying crafted path input that triggers a relative path-traversal condition, degrading availability of the affected service. The attack is local-only (AV:L) and requires the attacker to already hold a low-privilege authenticated context on the device (PR:L), with no user interaction needed (UI:N); there is no confidentiality or integrity impact and no code execution. Risk to most environments is limited: no public exploit identified at time of analysis, EPSS is 0.11% (1st percentile), and the issue is not listed in CISA KEV.
Denial of service in the office service of Huawei HarmonyOS 5.0.1 and 5.1.0 allows local attackers with low-level privileges to crash or degrade the service, impacting availability only. The vulnerability requires local access (AV:L) and no user interaction, with no effect on confidentiality or integrity. No public exploit code or active exploitation has been identified, and the EPSS score is 0.11% (percentile 1%).
Denial of service in the Huawei HarmonyOS office service (shipped with HarmonyOS 5.0.1 and 5.1.0) lets a locally running application with only low-level privileges crash or hang the service, affecting availability with no confidentiality or integrity impact. Exploitation is not remote: the attacker must already have code executing on the device (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, score 5.5), and no user interaction is required once that foothold exists. There is no public exploit identified at time of analysis and EPSS is very low (0.11%, 1st percentile); Huawei documented the issue in its October 2025 consumer security bulletin, so this is a low-to-moderate priority hardening item rather than an emergency.
A local denial-of-service condition in the 'office service' component of Huawei HarmonyOS 5.0.1 and 5.1.0 lets an attacker who already holds a foothold on the device with low-level privileges crash or otherwise render that service unavailable, with no confidentiality or integrity impact. The vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms exploitation is strictly local and requires low privileges, so a locally installed or running app or local account able to reach the office service is sufficient, and no user interaction is needed. Severity is moderate (CVSS 5.5) and the EPSS score is negligible at roughly 0.09% (0th percentile); no public exploit code has been identified and there is no indication of active exploitation. Huawei published an October 2025 consumer security bulletin addressing the affected HarmonyOS releases.
Use-after-free in Huawei HarmonyOS 5.0.1 and 5.1.0 office service allows a locally installed low-privileged app to trigger memory corruption and potentially read confidential data from the service's memory. Exploitation requires local access and low privileges (AV:L/PR:L), with no user interaction (UI:N), and impact is limited to confidentiality (C:H/I:N/A:N) within the same security scope (S:U). No public exploit identified at time of analysis, and EPSS is low at 0.10% (1st percentile).
Denial of service in the office service of Huawei HarmonyOS 5.0.1 and 5.1.0 allows a local attacker with low privileges to make the service unavailable, requiring an existing on-device foothold such as a malicious low-privileged application. The vulnerability is not remotely exploitable and impacts only availability, with no effect on confidentiality or integrity. No public exploit code or active exploitation has been identified, and the EPSS score is very low (0.11%, 1st percentile), indicating minimal real-world urgency.
Bypassing permission verification in the Huawei Camera app on HarmonyOS 5.0.1 and 5.1.0 allows local attackers to disclose confidential information by convincing a user to install or run a malicious application. The flaw is moderate severity (CVSS 5.5) with low EPSS (0.09%) and no public exploit identified at time of analysis; exploitation requires local access and user interaction.
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the balancer tries to balance a migration. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkpoint_list(). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list In shrink_folio_list(), the hwpoisoned folio may be large. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.
Race condition vulnerability in the device standby module. Rated medium severity (CVSS 5.1), this vulnerability is no authentication required. No vendor patch available.
Race condition vulnerability in the audio module. Rated high severity (CVSS 7.5). No vendor patch available.
Out-of-bounds read vulnerability in the runtime interpreter module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Vulnerability of exposing object heap addresses in the Ark eTS module. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
EnzoH has an OS command injection vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.
EnzoH has an OS command injection vulnerability. Rated medium severity (CVSS 4.5). No vendor patch available.