CVE-2025-58278: Infoleak
Published Oct 11, 2025
·Updated
Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
1 affected component
Huawei Harmonyos=5.0.1
Event History
Oct 11, 2025
CVE Published
via MITRE·03:47 AM
Data Sourced
via MITRE·03:47 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-58278?
CVE-2025-58278 has been classified as a critical security vulnerability due to its potential impact on service confidentiality.
2
How do I fix CVE-2025-58278?
The recommended fix for CVE-2025-58278 is to update the Huawei HarmonyOS Gallery app to the latest version that addresses the authentication bypass issue.
3
What devices are affected by CVE-2025-58278?
CVE-2025-58278 specifically affects devices running Huawei HarmonyOS version 5.0.1.
4
What is the impact of exploiting CVE-2025-58278?
Exploitation of CVE-2025-58278 can lead to unauthorized access to sensitive information, jeopardizing the confidentiality of services.
5
When was CVE-2025-58278 disclosed?
CVE-2025-58278 was disclosed in October 2025.