CVE-2025-57839
BaseFortify
Publication date: 2025-10-20
Last updated on: 2025-10-21
Assigner: Honor Device Co., Ltd.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| honor | magic_os | 9.0.0.100 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an information leak found in the Photo module of HONOR devices running MagicOS. Exploiting this flaw can lead to leaking sensitive information, which compromises the confidentiality of the service. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability can compromise the confidentiality of your data by leaking sensitive information from the Photo module on affected HONOR devices. This could potentially expose private or sensitive information to unauthorized parties. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your HONOR device running MagicOS to version 9.0.0.100 or later, as the fix has been implemented starting from this version. Devices with automatic updates enabled will receive a system update prompt to install the patch. Installing this update will address the information leak vulnerability in the Photo module. [1]