CVE-2024-58112

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 7, 2025
CWE ID 248

Summary

CVE-2024-58112 is an Exception capture failure vulnerability identified in the SVG parsing module of the ArkUI framework. This issue can potentially impact the availability of affected systems by allowing an attacker to cause the software to become unresponsive or crash. The exact cause of the vulnerability lies in the failure to properly handle exceptions during the SVG parsing process. Despite the availability impact, no data disclosure or unauthorized access is reportedly possible through this vulnerability. System administrators are advised to update their ArkUI framework as soon as a patch becomes available to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HarmonyOS

Affected Vendors

  • Huawei Technologies