CVE-2025-54617: Huawei Harmonyos

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE.

Affected products

• Huawei Harmonyos: version 5.1.0 only

Published 2025-08-06. Last modified 2026-06-17.