CVE-2025-53178

MEDIUM

Huawei EMUI - Permission Bypass in Calendar Storage Module

Title source: llm

Description

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

References (1)

Core 1

Core References

Vendor Advisory

https://consumer.huawei.com/en/support/bulletin/2025/7/

Scores

CVSS v3 4.8

EPSS 0.0003

EPSS Percentile 9.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-264

Status published

Products (4)

huawei/emui 14.0.0

huawei/harmonyos 4.0.0

huawei/harmonyos 4.2.0

huawei/harmonyos 4.3.0

Published Jul 07, 2025

Tracked Since Feb 18, 2026