Huawei HarmonyOS Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in Huawei HarmonyOS, which stems from improper privilege control of the memory management module and can be exploite...

Huawei HarmonyOS file management module privilege control vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS file management module, which can be exploited by an attacker to compromise service...

CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58304

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58304

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-64315

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...

CVE-2025-64315

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...

CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-64312

CVE-2025-64312 describes a permission/privilege control vulnerability in the Huawei HarmonyOS file management module. The impact is stated as potential confidentiality loss. Public data include CVSS v3.1 scores (base 7.5 HIGH, vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and a Huawei bulletin refe...

EUVD-2025-199855

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58304

Technical details for CVE-2025-58304 are not publicly available in the provided documents. See listed references for potential disclosure updates; monitor for new firmware versions or advisories from Huawei.

CVE-2025-64315

CVE-2025-64315 concerns a configuration defect in Huawei HarmonyOS, specifically in the file management module. The available sources describe a configuration flaw that can affect the confidentiality and integrity of application data if exploited. The documents do not provide concrete technical d...

EUVD-2025-199841

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...

EUVD-2025-199845

Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS file management module, which can be exploited by an attacker to compromise service...

PT-2025-48310

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2025-48303

Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS version 5.1.0 Description A permission control issue exists within the memory management module. Successful exploitation of this issue may lead to a compromise of confidentiality. The issue allows unprivileged local attackers ...

CVE-2025-60645

A Cross-Site Request Forgery CSRF in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request...