CVE-2025-58316CWE-362

CVE-2025-58316

High · published November 28, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

⚡ A single malformed video request could bring your system to its knees! This denial-of-service (DoS) vulnerability is hiding in the video-related system service module. 🔥 Think of it like a traffic jam caused by one car blocking the entire road; only a few poorly formatted video files can slow everything down for everyone else, halting their fun and productivity. If exploited, this vulnerability could lead to widespread service interruptions, making video playback impossible! Imagine users unable to enjoy their favorite shows or meetings grinding to a halt – absolutely devastating for user satisfaction and productivity.

Put simply

Think of it like a traffic jam caused by one car blocking the entire road; only a few poorly formatted video files can slow everything down for everyone else, halting their fun and productivity. This vulnerability occurs when the video-related system service module fails to handle malformed video requests correctly, allowing attackers to cause a denial of service by overwhelming the service with these faulty requests.

What to do

If exploited, this vulnerability could lead to widespread service interruptions, making video playback impossible! Imagine users unable to enjoy their favorite shows or meetings grinding to a halt – absolutely devastating for user satisfaction and productivity. To mitigate this issue, apply the latest updates from your software vendor immediately. Additionally, monitor the system for unusual traffic patterns that may indicate an attempt to exploit this vulnerability. Regular software audits can further enhance your defenses. You can handle this! Stay proactive, patch up, and keep your services running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00071 · 0.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-11-28T08:16Z
Affected products (3)
ProductVersionsFixed in
huawei/harmonyosall versions—
huawei/harmonyosall versions—
huawei/harmonyosall versions—
References (1)
EPSS history
Timeline
  • 28 NOV 02:31Z
    DoS vulnerability in the video-related system service module
    cvelistv5