Attribute Deserialization Vulnerability in Huawei Media Playback Products
CVE-2025-54640

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
6 August 2025

What is CVE-2025-54640?

A ParcelMismatch vulnerability in Huawei's media playback products arises during attribute deserialization processes. This security flaw can lead to exceptions in the playback control screen display, potentially disrupting user experience. Users are encouraged to apply available patches to mitigate risks associated with this vulnerability, ensuring seamless media playback and safeguarding against potential exploits.

Affected Version(s)

HarmonyOS 5.1.0

HarmonyOS 5.0.1

References

https://consumer.huawei.com/en/support/bulletin/2025/8/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.