CVE-2025-48908 — Unsynchronized Access to Shared Data in a Multithreaded Context in Huawei Harmonyos

CWE-567 — Unsynchronized Access to Shared Data in a Multithreaded Context3 documents3 sources

Severity

6.7MEDIUMNVD

EPSS

0.0%

top 88.41%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Harmonyos

Timeline

PublishedJun 6

Description

Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5huawei/harmonyos5.0.0

▶NVDhuawei/harmonyos5.0.2

🔴Vulnerability Details

CVEList

CVE-2025-48908: Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability↗2025-06-06

▶

GHSA

GHSA-4hg3-x4gx-qgwf: Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability↗2025-06-06

▶