CVE-2025-53185

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memoryImpact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-53186

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54606

Status verification vulnerability in the lock screen module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54634

Vulnerability of improper processing of abnormal conditions in huge page separation.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54635

Vulnerability of returning released pointers in the distributed notification service.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54655

Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module.

CVE-2024-58117

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53171

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53172

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53174

Stack overflow risk when vector images are parsed during file previewImpact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53178

Permission bypass vulnerability in the calendar storage moduleImpact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

CVE-2025-53180

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53181

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53182

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53183

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54607

Authentication management vulnerability in the ArkWeb module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54608

Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.

CVE-2025-54611

EXTRA_REFERRER resource read vulnerability in the Gallery module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54618

Permission control vulnerability in the distributed clipboard module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54627

Out-of-bounds write vulnerability in the skia module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54641

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54651

Race condition vulnerability in the kernel hufs module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53179

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53184

Null pointer dereference vulnerability in the PDF preview moduleImpact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54609

Out-of-bounds access vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54610

Out-of-bounds access vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54620

Deserialization vulnerability of untrusted data in the ability module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54625

Race condition vulnerability in the kernel file system module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54636

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54642

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54645

Out-of-bounds array access issue due to insufficient data verification in the location service module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module.Impact: Successful exploitation of this vulnerability may affect performance.

CVE-2025-54647

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54648

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54649

Vulnerability of using incompatible types to access resources in the location service.Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect.

CVE-2025-54614

Input verification vulnerability in the home screen module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54615

Vulnerability of insufficient information protection in the media library module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54616

Out-of-bounds array access vulnerability in the ArkUI framework.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54619

Iterator failure issue in the multi-mode input module.Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability.

CVE-2025-54624

Unexpected injection event vulnerability in the multimodalinput module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54631

Vulnerability of insufficient data length verification in the partition module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54633

Out-of-bounds read vulnerability in the register configuration of the DMA module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54637

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module.Impact: Successful exploitation of this vulnerability may affect the availability of the ad service.

CVE-2025-58281

Out-of-bounds read vulnerability in the runtime interpreter module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58313

Race condition vulnerability in the device standby module.Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device standby module.

CVE-2025-58276

Permission verification vulnerability in the home screen moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58280

Vulnerability of exposing object heap addresses in the Ark eTS module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58296

Race condition vulnerability in the audio module.Impact: Successful exploitation of this vulnerability may affect function stability.