CVE-2024-58114

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	5.0.0

References

https://consumer.huawei.com/en/support/bulletin/2025/6/Vendor Advisory

Timeline

Published: Jun 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-581157.5Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may aff CVE-2024-581167.5Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may aff CVE-2024-581173.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the f CVE-2024-58122.7A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can CVE-2024-581249.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581259.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581269.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581279.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581284.8In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin CVE-2024-581294.8In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with a CVE-2024-58134.9A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private CVE-2024-581306.1In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON respon