CVE-2025-53169

Vulnerability of bypassing the process to start SA and use related functions on distributed camerasImpact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.

CVE-2025-53173

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53167

Authentication vulnerability in the distributed collaboration framework moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53170

Null pointer dereference vulnerability in the application exit cause moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53175

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53176

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53177

Permission bypass vulnerability in the calendar storage moduleImpact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

CVE-2025-53185

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memoryImpact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-53186

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54652

Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module.

CVE-2024-58117

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53171

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53172

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53174

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53178

Permission bypass vulnerability in the calendar storage moduleImpact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

CVE-2025-53180

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53181

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53182

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53183

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54606

Status verification vulnerability in the lock screen module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54634

Vulnerability of improper processing of abnormal conditions in huge page separation.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54635

Vulnerability of returning released pointers in the distributed notification service.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54653

Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module.

CVE-2025-53179

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53184

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54607

Authentication management vulnerability in the ArkWeb module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54611

EXTRA_REFERRER resource read vulnerability in the Gallery module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54618

Permission control vulnerability in the distributed clipboard module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54621

Iterator failure issue in the WantAgent module.Impact: Successful exploitation of this vulnerability may cause memory release failures.

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54627

Out-of-bounds write vulnerability in the skia module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54641

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module.Impact: Successful exploitation of this vulnerability may affect performance.

CVE-2025-54648

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54649

Vulnerability of using incompatible types to access resources in the location service.Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect.

CVE-2025-54651

Race condition vulnerability in the kernel hufs module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54655

Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module.

CVE-2025-54608

Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.

CVE-2025-54609

Out-of-bounds access vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54610

Out-of-bounds access vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54614

Input verification vulnerability in the home screen module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54615

Vulnerability of insufficient information protection in the media library module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54616

Out-of-bounds array access vulnerability in the ArkUI framework.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54633

Out-of-bounds read vulnerability in the register configuration of the DMA module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54636

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54637

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module.Impact: Successful exploitation of this vulnerability may affect the availability of the ad service.

CVE-2025-54642

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54645

Out-of-bounds array access issue due to insufficient data verification in the location service module.Impact: Successful exploitation of this vulnerability may affect availability.