CVE-2025-57839
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-20

Last updated on: 2025-10-21

Assigner: Honor Device Co., Ltd.

Description
Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-20
Last Modified
2025-10-21
Generated
2026-06-16
AI Q&A
2025-10-20
EPSS Evaluated
2026-06-15
NVD
CVE-2025-57839
EUVD
EUVD-2025-35040
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
honor magic_os 9.0.0.100
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an information leak found in the Photo module of HONOR devices running MagicOS. Exploiting this flaw can lead to leaking sensitive information, which compromises the confidentiality of the service. [1]

Impact Analysis

If exploited, this vulnerability can compromise the confidentiality of your data by leaking sensitive information from the Photo module on affected HONOR devices. This could potentially expose private or sensitive information to unauthorized parties. [1]

Mitigation Strategies

To mitigate this vulnerability, update your HONOR device running MagicOS to version 9.0.0.100 or later, as the fix has been implemented starting from this version. Devices with automatic updates enabled will receive a system update prompt to install the patch. Installing this update will address the information leak vulnerability in the Photo module. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-57839. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart