CVE-2025-57839

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-20

Last updated on: 2025-10-21

Assigner: Honor Device Co., Ltd.

Description

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-20

Last Modified

2025-10-21

Generated

2026-07-06

AI Q&A

2025-10-20

EPSS Evaluated

2026-07-05

NVD

CVE-2025-57839

EUVD

EUVD-2025-35040

Affected Vendors & Products

Vendor	Product	Version / Range
honor	magic_os	9.0.0.100

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information leak found in the Photo module of HONOR devices running MagicOS. Exploiting this flaw can lead to leaking sensitive information, which compromises the confidentiality of the service. [1]

Impact Analysis

If exploited, this vulnerability can compromise the confidentiality of your data by leaking sensitive information from the Photo module on affected HONOR devices. This could potentially expose private or sensitive information to unauthorized parties. [1]

Mitigation Strategies

To mitigate this vulnerability, update your HONOR device running MagicOS to version 9.0.0.100 or later, as the fix has been implemented starting from this version. Devices with automatic updates enabled will receive a system update prompt to install the patch. Installing this update will address the information leak vulnerability in the Photo module. [1]

Hi! I’m here to help you understand CVE-2025-57839. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70