Huawei HarmonyOS Path Traversal Vulnerability in Virtualization Base Module

Vulnerability

A path traversal vulnerability has been identified in the virtualization base module of Huawei HarmonyOS versions 5.0.1 and 5.0.2. This vulnerability could be exploited to traverse directories and access files outside of the intended directory, potentially leading to unauthorized disclosure of information. Successful exploitation may impact the confidentiality of the virtualization module.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information within the virtualization base module, compromising its confidentiality.

Remediation

Users can apply the latest security update available through the Huawei Update Center to address this vulnerability.

Added: Aug 6, 2025, 1:18 AM
Updated: Aug 6, 2025, 1:18 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
3.3
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.