← Vulnerability feed

Vulnerability record · CVE-2025-64312 · published 28 November 2025

CVE-2025-64312: Huawei harmonyos information exposure vulnerability

Huawei · Harmonyos

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5 CVSS 3.1 High EPSS 0.16% · top 95.5% CWE-200 · Information exposure
7.5CVSS 3.1 base score
0.16%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://consumer.huawei.com/en/support/bulletin/2025/11/ Third Party Advisory

Track CVE-2025-64312 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2026-34865Huawei harmonyos heap-based buffer overflow vulnerabilityOut-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentialit…EPSS 0.36%9.8CVE-2025-54617Huawei harmonyos stack-based buffer overflow vulnerabilityStack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE.EPSS 0.32%9.8CVE-2024-57959Huawei emui use after free vulnerabilityUse-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormal…EPSS 0.23%9.8CVE-2024-57961Huawei emui out-of-bounds write vulnerabilityOut-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.EPSS 0.28%9.8CVE-2024-32991Huawei emui vulnerabilityPermission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.55%9.8CVE-2023-52381Huawei emui code injection vulnerabilityScript injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and a…EPSS 0.45%9.8CVE-2023-52378Huawei emui vulnerabilityVulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perf…EPSS 0.46%9.8CVE-2023-52370Huawei emui classic buffer overflow vulnerabilityStack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2025-64312), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.