CVE-2025-58304: Medium severity Huawei Harmonyos vulnerability
Published Nov 28, 2025
·Updated
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
3 affected components
Huawei Harmonyos=5.0.1
Huawei Harmonyos=5.1.0
Huawei Harmonyos=6.0.0
Event History
Nov 28, 2025
CVE Published
via MITRE·02:58 AM
Data Sourced
via MITRE·02:58 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-58304?
CVE-2025-58304 is classified as a high severity vulnerability due to its potential impact on service confidentiality.
2
How do I fix CVE-2025-58304?
To mitigate CVE-2025-58304, users should update their Huawei HarmonyOS to the latest patched version that addresses this vulnerability.
3
What types of devices are affected by CVE-2025-58304?
CVE-2025-58304 affects Huawei HarmonyOS versions 5.0.1, 5.1.0, and 6.0.0.
4
What is the impact of exploiting CVE-2025-58304?
Exploitation of CVE-2025-58304 can result in unauthorized access to sensitive information, compromising service confidentiality.
5
Is there a workaround for CVE-2025-58304?
Currently, the best practice for CVE-2025-58304 is to apply the available updates rather than relying on workarounds.