PT-2025-48308 · Huawei · Harmonyos 6.0.0+2

Published 2025-11-05 · Updated 2025-12-03 · CVE-2025-58308

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS versions 5.0.1 through 5.1.0 Huawei HarmonyOS version 6.0.0

Description An improper criterion security check exists within the call module. Successful exploitation of this issue may cause features to perform abnormally.

Recommendations Restrict access to the call module for Huawei HarmonyOS version 5.0.1. Restrict access to the call module for Huawei HarmonyOS version 5.1.0. Restrict access to the call module for Huawei HarmonyOS version 6.0.0.

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

BDU:2025-14940

CVE-2025-58308

Affected Products

Harmonyos 5.0.1

Harmonyos 5.1.0

Harmonyos 6.0.0

References · 9

• https://consumer.huawei.com/en/support/bulletin/2025/11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14940 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58308 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58308 · Vendor Advisory
• https://twitter.com/dailycve/status/1995730973653160403 · Twitter Post
• https://twitter.com/cracbot/status/1996172620971270458 · Twitter Post
• https://t.me/CVEtracker/38421 · Telegram Post
• https://twitter.com/CVEnew/status/1994250830887739396 · Twitter Post
• https://twitter.com/offseq/status/1994278101589659875 · Twitter Post