CVE-2024-58114

Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-58114

CVE-2024-58114 concerns a resource allocation control failure in the ArkUI framework. The CVE entry records a low-impact availability effect with a CVSSv3.1 base score of 4.0 (attack vector: local, attack complexity: low, privileges required: none, user interaction: none, scope: unchanged; confid...

CVE-2025-48907

Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48907

Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48907

CVE-2025-48907 is a deserialization vulnerability in Huawei HarmonyOS IPC module. The issue stems from unsafe deserialization of data received by an application, with impact noted as availability loss (CVSSv3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base score 6.2). Connected sources confirm Harmo...

CVE-2025-48906

Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48906

CVE-2025-48906 concerns an authentication bypass in the DSoftBus module, impacting Huawei HarmonyOS environments. The available documents identify the affected component (DSoftBus) and the impact on availability, but do not provide concrete root-cause details, affected versions, exploit vectors, ...

CVE-2025-48906

Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48904

Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48904

CVE-2025-48904 affects Huawei’s HarmonyOS family (noted with HarmonyOS 5.0.0 in CNVD/CNNVD). The issue is described as: cards can call unauthorized APIs in the FRS process, which can impact availability if exploited. The NVD entry documents a LOCAL, low-attack‑complexity vector with no privileges...

CVE-2025-48904

Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48903

CVE-2025-48903 denotes a permission-bypass vulnerability in Huawei HarmonyOS’s media library module. Reported impact indicates potential availability disruption upon successful exploitation. Core details across sources show a local attack with low complexity and no privileges required, but user i...

CVE-2025-48903

Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48902

CVE-2025-48902 affects Huawei HarmonyOS/EMUI and is described as a vulnerability in the setting module leading to potential availability impact. Public documentation in connected sources provides CVSS metrics (AV:L, AC:H, PR:L, UI:R, S:C, C:L/I:L/A:H) and notes exploitation is not detailed in the...

CVE-2025-48902

Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-24030 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a vulnerability of improper permission assignment in the note sharing module. Successful exploitation of this vulnerability may affect availability. Recommendations: At th...

PT-2025-24025 · Dsoftbus · Dsoftbus

Name of the Vulnerable Software and Affected Versions: DSoftBus affected versions not specified Description: The issue is related to an authentication bypass vulnerability in the DSoftBus module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the moment...

PT-2025-24029 · Dfile · Dfile

Name of the Vulnerable Software and Affected Versions: DFile module affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the DFile module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the moment, ther...

PT-2025-24019 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to a resource allocation control failure in the ArkUI framework. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...

PT-2025-24060 · Undefined · Undefined

CVSS: 4.3 Impact Loss of Availability Loss of Confidentiality Loss of Integrity Description A remote authenticated attacker can exploit a vulnerability in Synology DiskStation Manager and Synology Router Manager in order to manipulate files. Affected Versions Synology - Synology Router Manager -...