CVE-2025-68957 HIGH

CVE-2025-68957

Vendor Huawei

Product HarmonyOS

Weakness CWE-362

Published January 14, 2026

Last update January 14, 2026

View on NVD All CVEs

CVSS base score

8.4/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

Key dates

02Disclosure timeline

January 14, 2026 CVE published

January 14, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-68957 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/362.html

Related vulnerabilities

04Related CVE

CVE-2026-42909 Remote Desktop Client Remote Code Execution Vulnerability CVE-2025-10263 CVE-2026-46693 ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking CVE-2026-44318 free5GC: BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions CVE-2026-44693 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer