CVE-2025-54650

Published: Aug 6, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function.

Affected (2)

Products: Huawei: Harmonyos

Huawei

1 product

Harmonyos

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Huawei Harmonyos	Version 5.0.1
Huawei Harmonyos	Version 5.1.0

Related CWEs

CWE-129

Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (1)

https://consumer.huawei.com/en/support/bulletin/2025/8/

Source: psirt@huawei.com

Vendor Advisory

Timeline

No history available yet.