CVE-2025-64311
BaseFortify
Publication date: 2025-11-28
Last updated on: 2025-12-02
Assigner: Huawei Technologies
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| huawei | harmonyos | 5.0.1 |
| huawei | harmonyos | 5.1.0 |
| huawei | harmonyos | 6.0.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a permission control issue in the Notepad module, which means that improper permission settings could allow unauthorized access or actions within the module.
How can this vulnerability impact me? :
Exploiting this vulnerability may compromise the confidentiality of services, potentially exposing sensitive information.
What immediate steps should I take to mitigate this vulnerability?
Apply the latest Huawei security update released in November 2025 that addresses permission control vulnerabilities in Huawei devices, including those running HarmonyOS. This update includes patches for Huawei and third-party libraries and is the recommended mitigation step. [1]