Huawei HarmonyOS Gallery Module Arbitrary Write Vulnerability

An arbitrary write vulnerability has been identified in the Gallery module of Huawei's HarmonyOS. This vulnerability, present in HarmonyOS 5.0.0, could be exploited to write arbitrary data, potentially leading to unauthorized modifications or disruptions in service. Successful exploitation may also impact the confidentiality of user data or services.

Impact

Exploitation of this vulnerability could result in unauthorized data modifications and a breach of service confidentiality.

Remediation

Users can refer to the Huawei Security Bulletin for February 2025 for guidance on applying the latest security updates, which address this vulnerability.