PT-2025-41652 · Unknown · Office Service

Published 2025-10-11 · Updated 2025-10-16 · CVE-2025-58287

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions office service (affected versions not specified)

Description A Use After Free (UAF) vulnerability exists in the office service. A Use After Free occurs when a program attempts to use a memory pointer after it has been freed, potentially leading to arbitrary code execution, data corruption, or crashes. Successful exploitation of this issue may impact the confidentiality of the service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-275

CWE-416

Related Identifiers

CVE-2025-58287

Affected Products

Office Service

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-58287 · Security Note
• https://consumer.huawei.com/en/support/bulletin/2025/10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-58287 · Vendor Advisory
• https://twitter.com/CveTodo/status/1976943048048210121 · Twitter Post
• https://t.me/cveNotify/138329 · Telegram Post
• https://twitter.com/cracbot/status/1978777989711032481 · Twitter Post
• https://twitter.com/CVEnew/status/1976939423679103059 · Twitter Post