BaseFortify

Publication date: 2025-10-11

Last updated on: 2025-10-16

Assigner: Huawei Technologies

Description

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-11

Last Modified

2025-10-16

Generated

2026-07-06

AI Q&A

2025-10-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-58291

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	5.0.1
huawei	harmonyos	5.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo
CWE-29	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service (DoS) issue in the office service. If successfully exploited, it can cause the service to become unavailable.

Impact Analysis

The impact of this vulnerability is on availability, meaning that the affected office service could be disrupted or made unavailable, potentially interrupting normal operations.

Hi! I’m here to help you understand CVE-2025-58291. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70