CVE-2025-58308

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Scoring

Severity

HIGH

CVSS base score

7.3

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

EPSS probability

0.08%

CWE

CWE-358

Published

2025-11-28

Last modified

2026-03-13

Affected products

• Huawei HarmonyOS
• Huawei HarmonyOS
• Huawei HarmonyOS

Weakness type

• CWE-358

Related vulnerabilities

• CVE-2026-46582 — A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
• CVE-2026-65058 — Trezor Safe improper security check in on-device display
• CVE-2026-49783 — Secure Boot Security Feature Bypass Vulnerability
• CVE-2026-54431 — Improper Data Validation in liboauth2
• CVE-2026-12577 — DVP80ES3 Improperly Implemented Security Check for Standard vulnerability
• CVE-2026-48797 — Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
• CVE-2026-42081 — free5GC: UE Security Capability bypass on NGAP PathSwitchRequest
• CVE-2026-42082 — free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover

Markdown version · Browse all CVEs