Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48902 CVE record

CVSS 6.6 Medium

Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-118
Not analysed yet 6 Jun 2025
CVE-2025-31175 CVE record

CVSS 8.4 High

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 7 Apr 2025
CVE-2025-31170 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58127 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58126 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58125 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58124 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58044 CVE record

CVSS 8.4 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 4 Mar 2025
CVE-2024-58043 CVE record

CVSS 7.3 High

Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 4 Mar 2025
CVE-2024-57961 CVE record

CVSS 6.8 Medium

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-57960 CVE record

CVSS 7.7 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Feb 2025
CVE-2024-57959 CVE record

CVSS 6.1 Medium

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-57958 CVE record

CVSS 5.7 Medium

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-56450 CVE record

CVSS 6.3 Medium

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56449 CVE record

CVSS 6.6 Medium

Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 8 Jan 2025
CVE-2024-56448 CVE record

CVSS 6.7 Medium

Code injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Code injection
Not analysed yet 8 Jan 2025
CVE-2024-56447 CVE record

CVSS 7.8 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 8 Jan 2025
CVE-2024-56442 CVE record

CVSS 5.5 Medium

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-227
Not analysed yet 8 Jan 2025
CVE-2024-56441 CVE record

CVSS 4.1 Medium

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 8 Jan 2025
CVE-2024-56440 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 8 Jan 2025
CVE-2024-56438 CVE record

CVSS 6.0 Medium

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2023-52955 CVE record

CVSS 6.5 Medium

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 8 Jan 2025
CVE-2023-52954 CVE record

CVSS 4.4 Medium

Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 8 Jan 2025
CVE-2023-52953 CVE record

CVSS 6.2 Medium

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 8 Jan 2025
CVE-2024-56434 CVE record

CVSS 4.4 Medium

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-54101 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 12 Dec 2024
CVE-2024-54100 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 12 Dec 2024
CVE-2024-54099 CVE record

CVSS 6.7 Medium

Files accessible to external parties in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 12 Dec 2024
CVE-2024-54098 CVE record

CVSS 8.5 High

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 12 Dec 2024
CVE-2024-54097 CVE record

CVSS 7.3 High

Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-15
Not analysed yet 12 Dec 2024
CVE-2024-54096 CVE record

CVSS 5.3 Medium

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 12 Dec 2024
CVE-2024-51528 CVE record

CVSS 4.0 Medium

Sensitive information in log files in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 5 Nov 2024
CVE-2024-51527 CVE record

CVSS 5.1 Medium

Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 5 Nov 2024
CVE-2024-51510 CVE record

CVSS 7.6 High

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 5 Nov 2024
CVE-2024-9136 CVE record

CVSS 6.7 Medium

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 27 Sept 2024
CVE-2024-47294 CVE record

CVSS 4.4 Medium

Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 27 Sept 2024
CVE-2024-47293 CVE record

CVSS 4.7 Medium

Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-130
Not analysed yet 27 Sept 2024
CVE-2024-47292 CVE record

CVSS 6.2 Medium

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 27 Sept 2024
CVE-2024-47291 CVE record

CVSS 5.6 Medium

Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 27 Sept 2024
CVE-2024-47290 CVE record

CVSS 5.5 Medium

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 27 Sept 2024
CVE-2024-8298 CVE record

CVSS 6.2 Medium

Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 4 Sept 2024
CVE-2024-45449 CVE record

CVSS 5.1 Medium

Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 4 Sept 2024
CVE-2024-45448 CVE record

CVSS 4.1 Medium

Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1259
Not analysed yet 4 Sept 2024
CVE-2024-45447 CVE record

CVSS 4.4 Medium

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 4 Sept 2024
CVE-2024-45446 CVE record

CVSS 5.5 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 4 Sept 2024
CVE-2024-45445 CVE record

CVSS 4.0 Medium

Incomplete cleanup in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-459
Not analysed yet 4 Sept 2024
CVE-2024-45444 CVE record

CVSS 5.5 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 4 Sept 2024
CVE-2024-45442 CVE record

CVSS 5.1 Medium

Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 4 Sept 2024
CVE-2024-45441 CVE record

CVSS 6.2 Medium

Improper input validation in huawei HarmonyOS and others
- huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 4 Sept 2024
CVE-2024-42039 CVE record

CVSS 4.3 Medium

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 4 Sept 2024
CVE-2024-45450 CVE record

CVSS 4.0 Medium

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 4 Sept 2024
CVE-2024-42038 CVE record

CVSS 8.8 High

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 8 Aug 2024
CVE-2024-42037 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-248
Not analysed yet 8 Aug 2024
CVE-2024-42036 CVE record

CVSS 2.5 Low

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-42035 CVE record

CVSS 8.4 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-42034 CVE record

CVSS 6.6 Medium

LaunchAnywhere vulnerability in the account module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 8 Aug 2024
CVE-2024-42033 CVE record

CVSS 6.9 Medium

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-42032 CVE record

CVSS 4.4 Medium

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-42031 CVE record

CVSS 7.5 High

Access permission verification vulnerability in the Settings module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 8 Aug 2024
CVE-2024-42030 CVE record

CVSS 6.2 Medium

Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 8 Aug 2024