Out-of-Bounds Read Vulnerability in NearLink Protocol Stack by Huawei
CVE-2025-54647

5.4MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
6 August 2025

What is CVE-2025-54647?

An out-of-bounds read vulnerability exists in the SSAP module of the NearLink protocol stack developed by Huawei. This flaw could potentially be exploited to impact the availability of systems utilizing this protocol, highlighting a critical need for timely patch management and network defenses to mitigate associated risks.

Affected Version(s)

HarmonyOS 5.1.0

References

https://consumer.huawei.com/en/support/bulletin/2025/8/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.