CVE-2025-54654: Medium severity Huawei Harmonyos vulnerability
Published Oct 11, 2025
·Updated
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
Affected Software
2 affected components
Huawei Harmonyos=5.0.1
Huawei Harmonyos=5.1.0
Event History
Oct 11, 2025
CVE Published
via MITRE·01:50 AM
Data Sourced
via MITRE·01:50 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-54654?
CVE-2025-54654 has a high severity due to its potential impact on service confidentiality.
2
How do I fix CVE-2025-54654?
Fixing CVE-2025-54654 involves updating the affected Huawei HarmonyOS to versions 5.0.1 or 5.1.0 where patches have been applied.
3
Which software versions are affected by CVE-2025-54654?
CVE-2025-54654 affects Huawei HarmonyOS versions 5.0.1 and 5.1.0.
4
What type of vulnerability is CVE-2025-54654?
CVE-2025-54654 is classified as a permission control vulnerability.
5
What could be the consequences of exploiting CVE-2025-54654?
Exploitation of CVE-2025-54654 may lead to unauthorized access, impacting the confidentiality of services.