CVE-2025-66325

MediumCVSS 5.5/10Last modified Oct 7, 2026

Description

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
HuaweiHarmonyOS4.3.1; 4.3.0; 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.0.0
HuaweiEMUI15.0.0; 14.2.0; 14.0.0; 13.0.0; 12.0.0

References

Timeline

Published
Dec 8, 2025
Last modified
Oct 7, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-663264.7Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663274.7Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2025-663284.7Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affectCVE-2025-663295.5Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availabilCVE-2025-66337.8A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may CVE-2025-663305.5App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect servCVE-2025-663315.5Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663325.5Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663335.5Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663345.5Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663355.3Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allowCVE-2025-663368.1Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpo
CVE-2025-66325: Medium severity, CVSS 5.5 | Vulnix