# Huawei HarmonyOS. Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.](https://agentprime.io/advisories/CVE-2023-52955.md) `CVE-2023-52955` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-264 - [Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2023-52954.md) `CVE-2023-52954` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-701 - [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52953.md) `CVE-2023-52953` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: Path traversal - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-56436.md) `CVE-2024-56436` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-1021 - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-56435.md) `CVE-2024-56435` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-1021 - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-56434.md) `CVE-2024-56434` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-22484.md) `CVE-2021-22484` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 28 Dec 2024 · Tags: Memory corruption, CWE-20 - [Incorrect default permissions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-37000.md) `CVE-2021-37000` · CVE record: Huawei HarmonyOS · CVSS 7.7 High · Not analysed yet · Published 28 Dec 2024 · Tags: Broken access control, CWE-255 - [Race condition in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54122.md) `CVE-2024-54122` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Race condition - [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54119.md) `CVE-2024-54119` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Information disclosure - [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54117.md) `CVE-2024-54117` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Information disclosure - [Improper check for unusual conditions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54116.md) `CVE-2024-54116` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-754 - [Improper check for unusual conditions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54115.md) `CVE-2024-54115` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-754 - [Improper check for unusual conditions in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54114.md) `CVE-2024-54114` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-754 - [Uncontrolled resource consumption in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54113.md) `CVE-2024-54113` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Denial of service - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54112.md) `CVE-2024-54112` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1021 - [Insufficient verification of data authenticity in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54111.md) `CVE-2024-54111` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-345 - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54110.md) `CVE-2024-54110` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1021 - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54109.md) `CVE-2024-54109` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Memory corruption - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54108.md) `CVE-2024-54108` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Memory corruption - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54107.md) `CVE-2024-54107` · CVE record: Huawei HarmonyOS · CVSS 7.1 High · Not analysed yet · Published 12 Dec 2024 · Tags: Memory corruption - [Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-54106.md) `CVE-2024-54106` · CVE record: Huawei HarmonyOS · CVSS 7.1 High · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-248 - [Buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54105.md) `CVE-2024-54105` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Memory corruption - [Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-54104.md) `CVE-2024-54104` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-264 - [Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-54103.md) `CVE-2024-54103` · CVE record: Huawei HarmonyOS · CVSS 6.1 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-264 - [Race condition in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54102.md) `CVE-2024-54102` · CVE record: Huawei HarmonyOS · CVSS 6.1 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Race condition - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-54101.md) `CVE-2024-54101` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-20 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-54100.md) `CVE-2024-54100` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-20 - [Files accessible to external parties in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-54099.md) `CVE-2024-54099` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Information disclosure - [Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.](https://agentprime.io/advisories/CVE-2024-54098.md) `CVE-2024-54098` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.5 High · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-840 - [Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.](https://agentprime.io/advisories/CVE-2024-54097.md) `CVE-2024-54097` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.3 High · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-15 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-54096.md) `CVE-2024-54096` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: Broken access control - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51530.md) `CVE-2024-51530` · CVE record: Huawei HarmonyOS · CVSS 6.6 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51529.md) `CVE-2024-51529` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Sensitive information in log files in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-51528.md) `CVE-2024-51528` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: Information disclosure - [Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-51527.md) `CVE-2024-51527` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-264 - [Improper signature verification in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51526.md) `CVE-2024-51526` · CVE record: Huawei HarmonyOS · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2024 · Tags: Weak cryptography or TLS - [Improper authorization in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51525.md) `CVE-2024-51525` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: Broken access control - [Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-51524.md) `CVE-2024-51524` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-264 - [Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-51523.md) `CVE-2024-51523` · CVE record: Huawei HarmonyOS · CVSS 7.1 High · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-840 - [Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-51522.md) `CVE-2024-51522` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-199 - [Improper privilege management in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51521.md) `CVE-2024-51521` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: Privilege escalation - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51520.md) `CVE-2024-51520` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51519.md) `CVE-2024-51519` · CVE record: Huawei HarmonyOS · CVSS 5.0 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-51518.md) `CVE-2024-51518` · CVE record: Huawei HarmonyOS · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-248 - [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51517.md) `CVE-2024-51517` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-129 - [Missing authorization in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51516.md) `CVE-2024-51516` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: Broken access control - [Race condition in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51515.md) `CVE-2024-51515` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: Race condition - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51514.md) `CVE-2024-51514` · CVE record: Huawei HarmonyOS · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Uncontrolled resource consumption in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51513.md) `CVE-2024-51513` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: Denial of service - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51512.md) `CVE-2024-51512` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Improper input validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51511.md) `CVE-2024-51511` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-20 - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-51510.md) `CVE-2024-51510` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.6 High · Not analysed yet · Published 5 Nov 2024 · Tags: Memory corruption - [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-9136.md) `CVE-2024-9136` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: Broken access control - [Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-47294.md) `CVE-2024-47294` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-16 - [Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-47293.md) `CVE-2024-47293` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-130 - [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-47292.md) `CVE-2024-47292` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: Path traversal - [Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-47291.md) `CVE-2024-47291` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-16 - [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-47290.md) `CVE-2024-47290` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: Memory corruption - [Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-8298.md) `CVE-2024-8298` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-701 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .