Huawei HarmonyOS UAF Vulnerability in Device Node Access Module

Vulnerability

A use-after-free vulnerability has been identified in the device node access module of Huawei's HarmonyOS. This vulnerability can lead to service exceptions, causing disruptions in device functionality. It affects multiple versions of HarmonyOS, including 4.2.0, 4.0.0, and EMUI 14.0.0.

Impact

Exploitation of this vulnerability may cause service exceptions on the device, disrupting normal functionality.

Remediation

Users can refer to the January 2025 Huawei Security Bulletin for guidance on applying the latest security updates, which include patches for this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
3.0
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.