BaseFortify

Publication date: 2025-11-28

Last updated on: 2025-12-02

Assigner: Huawei Technologies

Description

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-28

Last Modified

2025-12-02

Generated

2026-07-06

AI Q&A

2025-11-28

EPSS Evaluated

2026-07-05

NVD

CVE-2025-64315

EUVD

EUVD-2025-199841

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	5.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-264	Permissions, Privileges, and Access Controls
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability is a configuration defect in the file management module of an application. It means that due to improper configuration, the module may be susceptible to issues that could compromise the confidentiality and integrity of application data.

Impact Analysis

If exploited successfully, this vulnerability can lead to unauthorized access or modification of application data, affecting its confidentiality and integrity. This could result in sensitive data being exposed or altered without authorization.

Hi! I’m here to help you understand CVE-2025-64315. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70