Insufficient Information Protection in Huawei Media Library Module
CVE-2024-58252

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
6 May 2025

What is CVE-2024-58252?

This vulnerability pertains to the media library module from Huawei, which lacks adequate safeguards for protecting sensitive information. Successful exploitation could lead to unauthorized access to confidential data, compromising the overall security of services relying on this module.

Affected Version(s)

HarmonyOS 5.0.0

References

https://consumer.huawei.com/en/support/bulletin/2025/5/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.