CVE-2025-54652

Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module.

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54653

Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module.

CVE-2025-54606

Status verification vulnerability in the lock screen module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54634

Vulnerability of improper processing of abnormal conditions in huge page separation.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54635

Vulnerability of returning released pointers in the distributed notification service.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54655

Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module.

CVE-2025-54607

Authentication management vulnerability in the ArkWeb module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54608

Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.

CVE-2025-54611

EXTRA_REFERRER resource read vulnerability in the Gallery module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54618

Permission control vulnerability in the distributed clipboard module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54627

Out-of-bounds write vulnerability in the skia module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54641

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54651

Race condition vulnerability in the kernel hufs module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54610

Out-of-bounds access vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54620

Deserialization vulnerability of untrusted data in the ability module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54621

Iterator failure issue in the WantAgent module.Impact: Successful exploitation of this vulnerability may cause memory release failures.

CVE-2025-54645

Out-of-bounds array access issue due to insufficient data verification in the location service module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module.Impact: Successful exploitation of this vulnerability may affect performance.

CVE-2025-54647

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54648

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54649

Vulnerability of using incompatible types to access resources in the location service.Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect.

CVE-2025-54609

Out-of-bounds access vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54613

Iterator failure vulnerability in the card management module.Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54614

Input verification vulnerability in the home screen module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54615

Vulnerability of insufficient information protection in the media library module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54616

Out-of-bounds array access vulnerability in the ArkUI framework.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54619

Iterator failure issue in the multi-mode input module.Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability.

CVE-2025-54624

Unexpected injection event vulnerability in the multimodalinput module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54625

Race condition vulnerability in the kernel file system module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54626

Pointer dangling vulnerability in the cjwindow module.Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54630

:Vulnerability of insufficient data length verification in the DFA module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54631

Vulnerability of insufficient data length verification in the partition module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54633

Out-of-bounds read vulnerability in the register configuration of the DMA module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54636

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54637

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module.Impact: Successful exploitation of this vulnerability may affect the availability of the ad service.

CVE-2025-54639

ParcelMismatch vulnerability in attribute deserialization.Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions.

CVE-2025-54640

ParcelMismatch vulnerability in attribute deserialization.Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions.

CVE-2025-54642

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module.Impact: Successful exploitation of this vulnerability may affect the audio decoding function.

CVE-2025-54612

Iterator failure vulnerability in the card management module.Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54617

Stack-based buffer overflow vulnerability in the dms_fwk module.Impact: Successful exploitation of this vulnerability can cause RCE.