CVE-2025-54611

Huawei / HarmonyOS PUBLISHED

Description (CNA)

EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Affected (CNA)

Vendor / product	Versions
Huawei / HarmonyOS	affected 4.3.1; affected 4.3.0; affected 4.2.0; affected 4.0.0; affected 3.1.0; affected 3.0.0; affected 2.1.0; affected 2.0.0
Huawei / EMUI	affected 15.0.0; affected 14.0.0; affected 13.0.0; affected 12.0.0

CWE

CWE-840

References

https://consumer.huawei.com/en/support/bulletin/2025/8/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.