CVE-2025-53186 — Race Condition in Huawei Emui

CWE-264CWE-362 — Race Condition4 documents4 sources
Severity
6.2MEDIUMNVD
CNA5.9
EPSS
0.0%
top 97.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedJul 7

Description

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.5 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5huawei/emui12.0.0, 13.0.0, 14.0.0+2
▶NVDhuawei/emui12.0.0, 13.0.0, 14.0.0+2
▶CVEListV5huawei/harmonyos7 versions+6
▶NVDhuawei/harmonyos7 versions+6

🔴Vulnerability Details

2
CVEList
CVE-2025-53186: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation↗2025-07-07
▶
GHSA
GHSA-wrrv-p96q-cmcq: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation↗2025-07-07
▶

📋Vendor Advisories

1
Microsoft
ksmbd: fix use-after-free in SMB request handling↗2024-12-10
▶
CVE-2025-53186 — Race Condition in Huawei Emui | cvebase