VendorsHuaweiharmonyos3.1.0
Vulnerabilities

Huawei HarmonyOS 3.1.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

265CVEs
CVE-2023-46769
Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46762
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46767
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46774
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46766
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46765
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46760
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-46761
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-41308
Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-09-26 · Modified
7.5EPSS 0.006
CVE-2023-46758
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.
Published 2023-11-08 · Modified
7.5EPSS 0.006
CVE-2023-41302
Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2023-09-25 · Modified
7.5EPSS 0.006
CVE-2023-44115
Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-26548
The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2023-46759
Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-39396
Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.
Published 2023-08-13 · Modified
7.5EPSS 0.005
CVE-2022-48346
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2023-44095
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.
Published 2023-10-11 · Modified
7.5EPSS 0.005
CVE-2023-44108
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-10-11 · Modified
7.5EPSS 0.005
CVE-2022-48359
The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2023-37239
Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.
Published 2023-07-06 · Modified
7.5EPSS 0.005
CVE-2023-41305
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-09-26 · Modified
7.5EPSS 0.005
CVE-2023-39409
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.005
CVE-2023-41299
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.005
CVE-2023-41300
Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.005
CVE-2023-34164
Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-39395
Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39397
Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-37241
Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-39404
Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39381
Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39408
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.004
CVE-2023-39382
Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-1696
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.
Published 2023-05-20 · Modified
7.5EPSS 0.004
CVE-2023-39386
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39388
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39389
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39390
Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-49245
Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49241
API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49243
Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
← Prev2 / 7Next →