VendorsHuaweiharmonyosall versions
Vulnerabilities

Huawei Harmonyos

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1050CVEs
CVE-2024-27897
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-08 · Analyzed
7.5EPSS 0.003
CVE-2023-52387
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-02-18 · Modified
7.5EPSS 0.003
CVE-2023-44093
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.003
CVE-2023-44109
Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.003
CVE-2024-54109
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-12-12 · Modified
7.5EPSS 0.003
CVE-2024-54097
Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.
Published 2024-12-12 · Analyzed
7.5EPSS 0.003
CVE-2022-41588
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.
Published 2022-10-14 · Modified
7.5EPSS 0.003
CVE-2021-37050
There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2021-12-08 · Modified
7.5EPSS 0.003
CVE-2022-46312
The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications.
Published 2022-12-20 · Modified
7.5EPSS 0.003
CVE-2022-46761
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.
Published 2023-01-06 · Modified
7.5EPSS 0.003
CVE-2022-48295
The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications).
Published 2023-02-09 · Modified
7.5EPSS 0.003
CVE-2022-48301
The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled.
Published 2023-02-09 · Modified
7.5EPSS 0.003
CVE-2022-48508
Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.
Published 2023-07-06 · Modified
7.5EPSS 0.003
CVE-2024-57957
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-02-06 · Analyzed
7.5EPSS 0.003
CVE-2023-44119
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.
Published 2023-10-11 · Modified
7.5EPSS 0.003
CVE-2023-52099
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2023-52374
Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-02-18 · Analyzed
7.5EPSS 0.003
CVE-2023-52107
Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2023-52373
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.
Published 2024-02-18 · Modified
7.5EPSS 0.003
CVE-2023-52379
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-02-18 · Modified
7.5EPSS 0.003
CVE-2023-52539
Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-08 · Analyzed
7.5EPSS 0.003
CVE-2023-44117
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2024-27895
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2024-04-08 · Modified
7.5EPSS 0.003
CVE-2023-4566
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2024-51518
Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.
Published 2024-11-05 · Analyzed
7.5EPSS 0.003
CVE-2023-52361
The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.
Published 2024-02-18 · Modified
7.5EPSS 0.003
CVE-2022-22253
The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.
Published 2022-04-11 · Modified
7.5EPSS 0.003
CVE-2023-52360
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.
Published 2024-02-18 · Modified
7.5EPSS 0.003
CVE-2022-37008
The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.
Published 2022-08-09 · Modified
7.5EPSS 0.003
CVE-2024-27896
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity.
Published 2024-04-08 · Analyzed
7.5EPSS 0.003
CVE-2023-52357
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.
Published 2024-02-18 · Analyzed
7.5EPSS 0.003
CVE-2024-54117
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-12-12 · Analyzed
7.5EPSS 0.003
CVE-2024-54106
Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-12-12 · Analyzed
7.5EPSS 0.003
CVE-2021-22484
Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM).
Published 2024-12-28 · Analyzed
7.5EPSS 0.003
CVE-2024-54113
Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption.
Published 2024-12-12 · Modified
7.5EPSS 0.003
CVE-2023-52114
Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2023-52111
Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2024-54110
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-12-12 · Modified
7.5EPSS 0.003
CVE-2021-46892
Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-07-06 · Modified
7.5EPSS 0.003
CVE-2024-42031
Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-08-08 · Modified
7.5EPSS 0.003
← Prev15 / 27Next →