CVE-2025-58314

Published: Nov 28, 2025Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Affected (15)

Products: Huawei: Emui, Harmonyos

Huawei

2 products

Emui

Harmonyos

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Huawei Emui	Version 12.0.0
Huawei Emui	Version 13.0.0
Huawei Emui	Version 14.0.0
Huawei Emui	Version 14.2.0
Huawei Emui	Version 15.0.0
Huawei Harmonyos	Version 2.0.0
Huawei Harmonyos	Version 3.0.0
Huawei Harmonyos	Version 3.1.0
Huawei Harmonyos	Version 4.0.0
Huawei Harmonyos	Version 4.2.0
Huawei Harmonyos	Version 4.3.0
Huawei Harmonyos	Version 4.3.1
Huawei Harmonyos	Version 5.0.1
Huawei Harmonyos	Version 5.1.0
Huawei Harmonyos	Version 6.0.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://consumer.huawei.com/en/support/bulletin/2025/11/

Source: psirt@huawei.com

Vendor Advisory

Timeline

No history available yet.