PT-2025-32083 · Parcel · Parcel

Published 2025-08-06 · Updated 2025-12-08 · CVE-2025-54639

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Parcel (affected versions not specified)

Description A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the display of the playback control screen.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-54639

Affected Products

Parcel

References · 4

• https://osv.dev/vulnerability/CVE-2025-54639 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2025/8 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54639 · Security Note
• https://t.me/cveNotify/145184 · Telegram Post