Huawei HarmonyOS Memory Write Permission Bypass Vulnerability in Kernel Futex Module

Vulnerability

A memory write permission bypass vulnerability has been identified in the kernel futex module of Huawei HarmonyOS. This vulnerability allows for unauthorized memory write operations, which could potentially be exploited to manipulate memory in a way that affects the confidentiality of services.

Impact

Exploitation of this vulnerability may lead to unauthorized memory modifications, potentially allowing for manipulation of service data or behavior, thereby affecting service confidentiality.

Remediation

Users can apply the latest security update for HarmonyOS 5.0.0, which includes a patch for this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
3.3
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.