CVE-2025-53178

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	4.3.0; 4.2.0; 4.0.0
Huawei	EMUI	14.0.0

References

https://consumer.huawei.com/en/support/bulletin/2025/7/Vendor Advisory

Timeline

Published: Jul 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-531797.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s CVE-2025-53185.4A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due CVE-2025-531807.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s CVE-2025-531817.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s CVE-2025-531827.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s CVE-2025-531837.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s CVE-2025-531847.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s CVE-2025-531855.5Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact CVE-2025-531866.2Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exp CVE-2025-531879.8Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing CVE-2025-53199.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Tec CVE-2025-531928.8** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue a