# Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Permission control vulnerability in the distributed clipboard module.](https://agentprime.io/advisories/CVE-2025-54618.md)
  `CVE-2025-54618` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-275
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54617.md)
  `CVE-2025-54617` · CVE record: Huawei HarmonyOS · CVSS 6.8 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Out-of-bounds write in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54616.md)
  `CVE-2025-54616` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54615.md)
  `CVE-2025-54615` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Information disclosure
- [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54614.md)
  `CVE-2025-54614` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-20
- [Iterator failure vulnerability in the card management module.](https://agentprime.io/advisories/CVE-2025-54613.md)
  `CVE-2025-54613` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-664
- [Iterator failure vulnerability in the card management module.](https://agentprime.io/advisories/CVE-2025-54612.md)
  `CVE-2025-54612` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-664
- [EXTRA_REFERRER resource read vulnerability in the Gallery module.](https://agentprime.io/advisories/CVE-2025-54611.md)
  `CVE-2025-54611` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-840
- [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54610.md)
  `CVE-2025-54610` · CVE record: Huawei HarmonyOS · CVSS 5.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129
- [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54609.md)
  `CVE-2025-54609` · CVE record: Huawei HarmonyOS · CVSS 5.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.](https://agentprime.io/advisories/CVE-2025-54608.md)
  `CVE-2025-54608` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-264
- [Improper certificate validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54607.md)
  `CVE-2025-54607` · CVE record: Huawei HarmonyOS · CVSS 7.7 High · Not analysed yet · Published 6 Aug 2025 · Tags: Weak cryptography or TLS
- [Status verification vulnerability in the lock screen module.](https://agentprime.io/advisories/CVE-2025-54606.md)
  `CVE-2025-54606` · CVE record: Huawei HarmonyOS · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-840
- [Time-of-check time-of-use race condition in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54655.md)
  `CVE-2025-54655` · CVE record: Huawei HarmonyOS · CVSS 8.1 High · Not analysed yet · Published 6 Aug 2025 · Tags: Race condition
- [Path traversal in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54653.md)
  `CVE-2025-54653` · CVE record: Huawei HarmonyOS · CVSS 8.4 High · Not analysed yet · Published 6 Aug 2025 · Tags: Path traversal
- [Path traversal in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54652.md)
  `CVE-2025-54652` · CVE record: Huawei HarmonyOS · CVSS 8.4 High · Not analysed yet · Published 6 Aug 2025 · Tags: Path traversal
- [Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-53186.md)
  `CVE-2025-53186` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264
- [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-53185.md)
  `CVE-2025-53185` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53184.md)
  `CVE-2025-53184` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53183.md)
  `CVE-2025-53183` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53182.md)
  `CVE-2025-53182` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53181.md)
  `CVE-2025-53181` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53180.md)
  `CVE-2025-53180` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53179.md)
  `CVE-2025-53179` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.](https://agentprime.io/advisories/CVE-2025-53178.md)
  `CVE-2025-53178` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264
- [Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.](https://agentprime.io/advisories/CVE-2025-53177.md)
  `CVE-2025-53177` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.9 Low · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53176.md)
  `CVE-2025-53176` · CVE record: Huawei HarmonyOS · CVSS 3.3 Low · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53175.md)
  `CVE-2025-53175` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53174.md)
  `CVE-2025-53174` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53173.md)
  `CVE-2025-53173` · CVE record: Huawei HarmonyOS · CVSS 5.3 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53172.md)
  `CVE-2025-53172` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53171.md)
  `CVE-2025-53171` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Stack-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-58117.md)
  `CVE-2024-58117` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [NULL pointer dereference in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53170.md)
  `CVE-2025-53170` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [Improper authentication in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-53169.md)
  `CVE-2025-53169` · CVE record: Huawei HarmonyOS · CVSS 7.6 High · Not analysed yet · Published 7 Jul 2025 · Tags: Authentication bypass
- [Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera w…](https://agentprime.io/advisories/CVE-2025-53168.md)
  `CVE-2025-53168` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-275
- [Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2025-53167.md)
  `CVE-2025-53167` · CVE record: Huawei HarmonyOS · CVSS 6.9 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-305
- [Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48908.md)
  `CVE-2025-48908` · CVE record: Huawei HarmonyOS · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-567
- [Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48911.md)
  `CVE-2025-48911` · CVE record: Huawei HarmonyOS · CVSS 8.2 High · Not analysed yet · Published 6 Jun 2025 · Tags: Privilege escalation
- [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-48910.md)
  `CVE-2025-48910` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: Memory corruption
- [Improper authentication in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-48909.md)
  `CVE-2025-48909` · CVE record: Huawei HarmonyOS · CVSS 7.1 High · Not analysed yet · Published 6 Jun 2025 · Tags: Authentication bypass
- [Resource allocation without limits in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-58114.md)
  `CVE-2024-58114` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: Denial of service
- [Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48907.md)
  `CVE-2025-48907` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-248
- [Authentication bypass by spoofing in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-48906.md)
  `CVE-2025-48906` · CVE record: Huawei HarmonyOS · CVSS 8.8 High · Not analysed yet · Published 6 Jun 2025 · Tags: Authentication bypass
- [Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.](https://agentprime.io/advisories/CVE-2025-48905.md)
  `CVE-2025-48905` · CVE record: Huawei HarmonyOS · CVSS 8.1 High · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-1068
- [Authentication bypass in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-48904.md)
  `CVE-2025-48904` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: Authentication bypass
- [Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48903.md)
  `CVE-2025-48903` · CVE record: Huawei HarmonyOS · CVSS 7.8 High · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-264
- [Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48902.md)
  `CVE-2025-48902` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-118
- [Uncontrolled resource consumption in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46593.md)
  `CVE-2025-46593` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 6 May 2025 · Tags: Denial of service
- [NULL pointer dereference in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46592.md)
  `CVE-2025-46592` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2025-46591.md)
  `CVE-2025-46591` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 May 2025 · Tags: CWE-602
- [Improper authentication in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46590.md)
  `CVE-2025-46590` · CVE record: Huawei HarmonyOS · CVSS 6.3 Medium · Not analysed yet · Published 6 May 2025 · Tags: Authentication bypass
- [Improper access control in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46589.md)
  `CVE-2025-46589` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 6 May 2025 · Tags: Broken access control
- [Improper access control in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46588.md)
  `CVE-2025-46588` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 6 May 2025 · Tags: Broken access control
- [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-58252.md)
  `CVE-2024-58252` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 May 2025 · Tags: Information disclosure
- [Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2025-46587.md)
  `CVE-2025-46587` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 May 2025 · Tags: CWE-264
- [Missing authorization in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46586.md)
  `CVE-2025-46586` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 6 May 2025 · Tags: Broken access control
- [Out-of-bounds write in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-46585.md)
  `CVE-2025-46585` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption
- [Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2025-46584.md)
  `CVE-2025-46584` · CVE record: Huawei HarmonyOS · CVSS 7.8 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-280
- [Deserialization of untrusted data in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-31175.md)
  `CVE-2025-31175` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 7 Apr 2025 · Tags: Insecure deserialization

Newest: <https://agentprime.io/advisories/technology/huawei-harmonyos.md>
Older: <https://agentprime.io/advisories/technology/huawei-harmonyos.md?cursor=WyIyMDI1LTA0LTA3VDAzOjU4OjIyLjAzMTAwMFoiLCJDVkUtMjAyNS0zMTE3NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-harmonyos&cursor=WyIyMDI1LTA4LTA2VDAxOjM0OjM4LjIwNzAwMFoiLCJDVkUtMjAyNS01NDYxOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-harmonyos/?cursor=WyIyMDI1LTA4LTA2VDAxOjM0OjM4LjIwNzAwMFoiLCJDVkUtMjAyNS01NDYxOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.