Inconsistent Read/Write Serialization in Huawei Ad Module
CVE-2025-54638

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
6 August 2025

What is CVE-2025-54638?

The vulnerability involves inconsistent read/write serialization within the ad module used by Huawei. This presents a risk where successful exploitation could disrupt the availability of the ad service, leading to potential downtime and affecting user experience. It is critical for users and administrators to apply the necessary mitigations to safeguard against this issue.

Affected Version(s)

HarmonyOS 5.1.0

HarmonyOS 5.0.1

References

https://consumer.huawei.com/en/support/bulletin/2025/8/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.