PT-2025-48307 · Unknown · Gallery App

Published 2025-11-05 · Updated 2025-12-02 · CVE-2025-58305

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Gallery app (affected versions not specified)

Description An identity authentication bypass issue exists in the Gallery app. Successful exploitation could compromise service confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-14938

CVE-2025-58305

Affected Products

Gallery App

References · 8

• https://consumer.huawei.com/en/support/bulletin/2025/11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14938 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58305 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58305 · Vendor Advisory
• https://twitter.com/dailycve/status/1995732148624425218 · Twitter Post
• https://huaweicentral.com/huawei-gallery-app-for-harmonyos-testing-new-features · Note
• https://twitter.com/CVEnew/status/1994250831747494240 · Twitter Post
• https://t.me/CVEtracker/38420 · Telegram Post