CVE-2025-54608

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-264CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-546097.5Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-546107.5Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-546115.5EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service cCVE-2025-546123.3Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stabCVE-2025-546133.3Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stabCVE-2025-546145.5Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-546155.5Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may CVE-2025-546165.5Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availabiliCVE-2025-546179.8Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE.CVE-2025-546185.7Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect serviCVE-2025-546193.3Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures andCVE-2025-54627.5A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway be