CVE-2025-66328CWE-362

CVE-2025-66328

High · published December 8, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

⚡ A multi-thread race condition hidden in the network management module could disrupt your service like a traffic jam at rush hour! Think of it like a group of chefs trying to grab the last slice of pizza from the kitchen. If they don’t coordinate, chaos ensues and no one gets a piece! In this case, requests are competing for resources, leading to potential downtime. If exploited, this vulnerability can severely affect the availability of your network services, leaving users stuck without access. Imagine your entire system going offline just as you're about to launch a new product - absolutely devastating!

Put simply

Think of it like a group of chefs trying to grab the last slice of pizza from the kitchen. If they don’t coordinate, chaos ensues and no one gets a piece! In this case, requests are competing for resources, leading to potential downtime. This vulnerability arises from improper synchronization between threads in the network management module, allowing multiple threads to interfere with each other's operations, potentially leading to service disruptions.

What to do

If exploited, this vulnerability can severely affect the availability of your network services, leaving users stuck without access. Imagine your entire system going offline just as you're about to launch a new product - absolutely devastating! To mitigate this risk, update to the latest version of the network management module as soon as it's available, and conduct a thorough review of your threading logic to ensure proper synchronization. Prioritize this fix in your next maintenance cycle! You've got this! Fixing this vulnerability will keep your services running smoothly and your users happy! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00068 · 0.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-12-08T14:15Z
Affected products (1)
ProductVersionsFixed in
huawei/harmonyosall versions—
References (1)
EPSS history
Timeline
  • 08 DEC 08:11Z
    Multi-thread race condition vulnerability in the network management module
    cvelistv5