CVE-2025-54646 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.1 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
huawei	CNA	5.1 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Vendor	Product	Version
huawei	emui	12.0.0
huawei	emui	13.0.0
huawei	emui	14.0.0
huawei	harmonyos	2.0.0
huawei	harmonyos	2.1.0
huawei	harmonyos	3.0.0
huawei	harmonyos	3.1.0
huawei	harmonyos	4.0.0
huawei	harmonyos	4.2.0
huawei	harmonyos	4.3.0
huawei	harmonyos	5.0.1
huawei	harmonyos	5.1.0

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-130 - Improper Handling of Length Parameter Inconsistency
The software parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

References

https://consumer.huawei.com/en/support/bulletin/2025/8/