CVE-2025-64314CWE-843

CVE-2025-64314

Critical · published November 28, 2025

CVSS v3.1
9.3
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

🔥 A misstep in the memory management module could let hackers peek at your secrets! Think of it as a restaurant where the chef accidentally forgot to close the kitchen door. Unauthorized diners can now wander in and see every ingredient and recipe, putting your culinary secrets at risk! If exploited, this vulnerability could lead to exposure of sensitive data, jeopardizing the confidentiality of your information. Imagine sensitive customer data, trade secrets, or confidential communications being revealed to unauthorized parties — absolutely devastating!

Put simply

Think of it as a restaurant where the chef accidentally forgot to close the kitchen door. Unauthorized diners can now wander in and see every ingredient and recipe, putting your culinary secrets at risk! This vulnerability in the memory management module lacks adequate permission controls, allowing an attacker to potentially access restricted memory sections. This oversight could enable them to read sensitive data from processes they shouldn't be able to access.

What to do

If exploited, this vulnerability could lead to exposure of sensitive data, jeopardizing the confidentiality of your information. Imagine sensitive customer data, trade secrets, or confidential communications being revealed to unauthorized parties — absolutely devastating! To protect against this vulnerability, ensure that your systems are updated with the latest patches from your vendor. Review your memory management configurations and implement strict permission controls to mitigate unauthorized access. Regular security audits will also help catch potential issues early! You've got this! With these steps, you'll bolster your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.7th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2025-11-28T08:16Z
Affected products (1)
ProductVersionsFixed in
huawei/harmonyosall versions—
References (1)
EPSS history
Timeline
  • 28 NOV 02:26Z
    Permission control vulnerability in the memory management module
    cvelistv5