Stack Overflow Vulnerability in Huawei Product during Vector Image Parsing
CVE-2025-53172

4MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
7 July 2025

What is CVE-2025-53172?

A stack overflow vulnerability exists in Huawei's Image Parser when processing vector images for file preview. This flaw may lead to a disruption of the file preview function when exploited, posing potential risks to system integrity and user data. It is crucial for users of affected products to implement the necessary security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

HarmonyOS 5.1.0

HarmonyOS 5.0.1

References

https://consumer.huawei.com/en/support/bulletin/2025/7/

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-53172 : Stack Overflow Vulnerability in Huawei Product during Vector Image Parsing