Huawei EMUI and HarmonyOS Permission Bypass Vulnerability in the Window Module

A permission bypass vulnerability has been identified in the window module of Huawei's EMUI and HarmonyOS. This vulnerability affects several different versions and could lead to unauthorized access or manipulation of sensitive information, thereby impacting service confidentiality.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially leading to confidentiality breaches.

Remediation

Users can apply the March 2025 security update to address this vulnerability. Instructions for downloading this update are available on the Huawei support website.