CVE-2025-58303CWE-362CWE-416

CVE-2025-58303

High · published November 28, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

⚡ A use-after-free vulnerability lurks in the screen recording framework, ready to disrupt! 🎥 Think of it like a restaurant where the chef starts preparing a meal but then forgets to dispose of the old ingredients, leading to a potentially disastrous dish served to customers. Just as the mix-up could ruin a meal, this vulnerability can lead to significant availability issues. Exploitation of this vulnerability could lead to service disruptions, jeopardizing the reliability of the screen recording feature. This means users might experience unexpected crashes or unavailable services, which could prove absolutely devastating in critical scenarios where screen capture is essential.

Put simply

Think of it like a restaurant where the chef starts preparing a meal but then forgets to dispose of the old ingredients, leading to a potentially disastrous dish served to customers. Just as the mix-up could ruin a meal, this vulnerability can lead to significant availability issues. The use-after-free (UAF) flaw allows attackers to exploit memory that has already been freed, potentially causing erratic behavior or even crashing the service. This can occur within the screen recording framework, making it particularly dangerous in environments relying on stable recordings.

What to do

Exploitation of this vulnerability could lead to service disruptions, jeopardizing the reliability of the screen recording feature. This means users might experience unexpected crashes or unavailable services, which could prove absolutely devastating in critical scenarios where screen capture is essential. To mitigate this risk, immediately update to the patched version provided by the vendor. Conduct a thorough assessment of your system's dependencies and ensure that you have proper memory management practices in place. Regular audits will also help spot similar vulnerabilities before they become issues. You've got this! By taking these steps, you'll be fortifying your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00076 · 0.1th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-416 · Use After Free
Published
2025-11-28T08:15Z
Affected products (3)
ProductVersionsFixed in
huawei/harmonyosall versions—
huawei/harmonyosall versions—
huawei/harmonyosall versions—
References (1)
EPSS history
Timeline
  • 28 NOV 02:28Z
    UAF vulnerability in the screen recording framework module
    cvelistv5