CVE-2025-58309: High severity Huawei Harmonyos vulnerability

Published Nov 28, 2025

Updated

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Affected Software

3 affected components

Huawei Harmonyos=5.0.1

Huawei Harmonyos=5.1.0

Huawei Harmonyos=6.0.0

Event History

Nov 28, 2025

CVE Published

via MITRE·02:33 AM

Data Sourced

via MITRE·02:33 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the CVE-2025-58309 vulnerability?

CVE-2025-58309 is a permission control vulnerability in the startup recovery module that impacts availability and confidentiality.

What are the affected software versions for CVE-2025-58309?

CVE-2025-58309 affects Huawei HarmonyOS versions 5.0.1, 5.1.0, and 6.0.0.

What is the severity of CVE-2025-58309?

The severity of CVE-2025-58309 is significant due to its potential impact on both availability and confidentiality of affected systems.

How do I fix CVE-2025-58309?

To mitigate CVE-2025-58309, users should update their Huawei HarmonyOS to the latest patched version as recommended by the vendor.

Can CVE-2025-58309 be exploited remotely?

Yes, CVE-2025-58309 can potentially be exploited remotely, which makes it critical for users to address the vulnerability promptly.