Input Verification Vulnerability in Huawei ExternalStorageProvider Module
CVE-2024-57960

7.7HIGH

Key Information:

Vendor
Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
6 February 2025

Summary

The ExternalStorageProvider module developed by Huawei has been identified with an input verification vulnerability that could allow unauthorized access to sensitive data. This flaw compromises the confidentiality of services provided by the module. Organizations utilizing this product should prioritize reviewing their configurations and applying any necessary updates to mitigate potential risks.

Affected Version(s)

EMUI 14.0.0

EMUI 13.0.0

HarmonyOS 4.3.0

References

https://consumer.huawei.com/en/support/bulletin/2025/2/

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.