CVE-2025-54650

The CVE-2025-54650 entry describes an improper array index verification vulnerability in Huawei HarmonyOS’s audio codec module. The flaw affects the audio decoding function; exploitation could impact decoding behavior as stated by multiple sources. Public assessments show a MEDIUM base score (NVD...

CVE-2025-54645

CVE-2025-54645 concerns Huawei HarmonyOS’ location service module, where an out-of-bounds array access occurs due to insufficient data verification. Affected component is the location service module; impact is potential unavailability. CVSS indicates local access with low attack complexity and no...

CVE-2025-54645

Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54644

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54637

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54616

Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54616

CVE-2025-54616 affects Huawei HarmonyOS ArkUI Framework with an out-of-bounds array access in ArkUI. CVSS data indicates local, low-privilege, no-user-interaction access leading to availability impact; exploitation details are not provided in the documents. Connected sources mention Huawei Harmon...

CVE-2025-27075: Improper Validation of Array Index

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host...

CVE-2025-27067: Improper Validation of Array Index

Memory corruption while processing DDI call with invalid buffer...

PT-2025-32089 · Unknown · Location Service Module

Name of the Vulnerable Software and Affected Versions: location service module affected versions not specified Description: The issue is an out-of-bounds array access caused by insufficient data verification within the location service module. Successful exploitation may affect availability...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1719)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An improper array index validation vulnerability exists in the Huawei HarmonyOS audio codec module, which can be exploited by an attacker to cause audio...

CVE-2025-54650: Improper Validation of Array Index

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

PT-2025-32094 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An improper array index verification issue exists in the audio codec module. Successful exploitation may affect the audio decoding function. Recommendations: ...

CVE-2025-54645: Improper Validation of Array Index

Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...

jq: jq has signed integer overflow in jv.c:jvp_array_write

A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory acces...

Linux Distros Unpatched Vulnerability : CVE-2022-49186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconticlkregistergates This code was using -1 to...

PT-2025-33767

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A stack out-of-bounds write issue exists in the tc entry parsing within the mqprio module of the Linux kernel. The TCA MQPRIO TC ENTRY INDEX is validated using NLA POLICY MAXNLA U32, T...

Lightweight Fault Detection Architecture for NTT on FPGA

Post-Quantum Cryptographic PQC algorithms are mathematically secure and resistant to quantum attacks but can still leak sensitive information in hardware implementations due to natural faults or intentional fault injections. The intent fault injection in side-channel attacks reduces the reliabili...

Linux Distros Unpatched Vulnerability : CVE-2023-52603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN:...