103 matches found
CVE-2025-66322
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66320
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66321
Summary of findings : The CVE-2025-66321 entry describes a multi-thread race condition vulnerability in Huawei’s HarmonyOS camera framework module . The underlying root cause is a race condition occurring in a multithreaded context, leading to a potential impact on availability . The connected CN...
CVE-2025-66320
CVE-2025-66320 describes a multi-thread race condition vulnerability in the Huawei HarmonyOS camera framework module. The vulnerability is rooted in a race condition within the camera framework’s multithreading behavior, with the public descriptions consistently indicating a potential impact on a...
PT-2025-49518
Name of the Vulnerable Software and Affected Versions Versions prior to 2025-66321 Description A multi-thread race condition exists in the camera framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information about a...
PT-2025-49517
Name of the Vulnerable Software and Affected Versions versions prior to 2025-66320 Description A multi-thread race condition exists within the camera framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information abou...
PT-2025-49519
Name of the Vulnerable Software and Affected Versions versions prior to 2025-66322 Description A multi-thread race condition exists in the camera framework module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about a newer...
Huawei HarmonyOS screen recording framework module memory misreference vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS screen recording framework module, which can be exploited by attackers to affect...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
Huawei HarmonyOS uses a screen recording framework module with a memory misreference (UAF) vulnerability that can be exploited locally to affect availability. Affected component: screen recording framework module in HarmonyOS. Root cause: memory misreference. Impact: availability. Exploitation de...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
CVE-2025-58303 concerns Huawei HarmonyOS: memory misreference/use-after-free in the screen recording framework module. Root cause: UAF/memory misreference leading to availability impact. Affected component: screen recording framework module (HarmonyOS). Impact per sources: availability disruption...
PT-2025-48294
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2025-112035
Malicious code in jwt-leda-framework-module npm...
MAL-2025-144078 Malicious code in jwt-leda-framework-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
