CVE-2025-58311_CVE-2025-58311

5.8 / 10

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:H

Description

UAF vulnerability in the USB driver module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Basic Information

ID CVE-2025-58311

Source huawei

Published Nov 28, 2025 at 03:08

Affected Product

Vendor Huawei

Product HarmonyOS

Version 5.1.0

Affected Versions Huawei HarmonyOS 5.1.0
Huawei HarmonyOS 5.0.1
Huawei HarmonyOS 4.3.1
Huawei HarmonyOS 4.3.0
Huawei HarmonyOS 4.2.0
Huawei HarmonyOS 4.0.0
Huawei EMUI 15.0.0
Huawei EMUI 14.2.0
Huawei EMUI 14.0.0

CWE Classification

CWE-416

References

consumer.huawei.com /en/support/bulletin/2025/11/

{
    "lastseen": "",
    "description": "UAF vulnerability in the USB driver module.\nImpact: Successful exploitation of this vulnerability will affect availability and confidentiality.",
    "published": "2025-11-28T03:08:31.958Z",
    "modified": "2025-11-28T03:08:31.958Z",
    "type": "cve",
    "title": "CVE-2025-58311",
    "source": "huawei",
    "references": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
    "id": "CVE-2025-58311",
    "bulletinFamily": "",
    "cwe": [
        "CWE-416"
    ],
    "cvelist": null,
    "sourceData": "Huawei HarmonyOS 5.1.0\nHuawei HarmonyOS 5.0.1\nHuawei HarmonyOS 4.3.1\nHuawei HarmonyOS 4.3.0\nHuawei HarmonyOS 4.2.0\nHuawei HarmonyOS 4.0.0\nHuawei EMUI 15.0.0\nHuawei EMUI 14.2.0\nHuawei EMUI 14.0.0",
    "sourceHref": "",
    "cvss": {
        "score": 5.8,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "HarmonyOS",
    "version": "5.1.0",
    "vendor": "Huawei",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}