# Huawei HarmonyOS. Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [The Device Manager has a vulnerability in multi-device interaction.](https://agentprime.io/advisories/CVE-2021-46812.md) `CVE-2021-46812` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.](https://agentprime.io/advisories/CVE-2022-31760.md) `CVE-2022-31760` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The AMS module has a vulnerability in input validation.](https://agentprime.io/advisories/CVE-2022-31762.md) `CVE-2022-31762` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [AppLink has a vulnerability of accessing uninitialized pointers.](https://agentprime.io/advisories/CVE-2022-31759.md) `CVE-2022-31759` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The communication module has a vulnerability of improper permission preservation.](https://agentprime.io/advisories/CVE-2022-31755.md) `CVE-2022-31755` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The fingerprint sensor module has design defects.](https://agentprime.io/advisories/CVE-2022-31756.md) `CVE-2022-31756` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The kernel emcom module has multi-thread contention.](https://agentprime.io/advisories/CVE-2022-31751.md) `CVE-2022-31751` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The kernel module has the race condition vulnerability.](https://agentprime.io/advisories/CVE-2022-31758.md) `CVE-2022-31758` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The kernel module has the null pointer and out-of-bounds array vulnerabilities.](https://agentprime.io/advisories/CVE-2022-31763.md) `CVE-2022-31763` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The video framework has an out-of-bounds memory read/write vulnerability.](https://agentprime.io/advisories/CVE-2021-46814.md) `CVE-2021-46814` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-29796.md) `CVE-2022-29796` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The frame scheduling module has a null pointer dereference vulnerability.](https://agentprime.io/advisories/CVE-2022-29795.md) `CVE-2022-29795` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.](https://agentprime.io/advisories/CVE-2022-29794.md) `CVE-2022-29794` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-29792.md) `CVE-2022-29792` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-29791.md) `CVE-2022-29791` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.](https://agentprime.io/advisories/CVE-2022-29790.md) `CVE-2022-29790` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-29789.md) `CVE-2022-29789` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-22261.md) `CVE-2022-22261` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.](https://agentprime.io/advisories/CVE-2022-22260.md) `CVE-2022-22260` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.](https://agentprime.io/advisories/CVE-2021-46787.md) `CVE-2021-46787` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.](https://agentprime.io/advisories/CVE-2021-46786.md) `CVE-2021-46786` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.](https://agentprime.io/advisories/CVE-2021-46785.md) `CVE-2021-46785` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40065.md) `CVE-2021-40065` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-46740.md) `CVE-2021-46740` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.](https://agentprime.io/advisories/CVE-2022-22253.md) `CVE-2022-22253` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.](https://agentprime.io/advisories/CVE-2021-46742.md) `CVE-2021-46742` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-22254.md) `CVE-2022-22254` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.](https://agentprime.io/advisories/CVE-2022-22255.md) `CVE-2022-22255` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-22256.md) `CVE-2022-22256` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.](https://agentprime.io/advisories/CVE-2022-22257.md) `CVE-2022-22257` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [There is a vulnerability of memory not being released after effective lifetime in the Bastet module.](https://agentprime.io/advisories/CVE-2021-40047.md) `CVE-2021-40047` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an incorrect buffer size calculation vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2021-40048.md) `CVE-2021-40048` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a permission control vulnerability in the PMS module.](https://agentprime.io/advisories/CVE-2021-40049.md) `CVE-2021-40049` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an out-of-bounds read vulnerability in the IFAA module.](https://agentprime.io/advisories/CVE-2021-40050.md) `CVE-2021-40050` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an unauthorized access vulnerability in system components.](https://agentprime.io/advisories/CVE-2021-40051.md) `CVE-2021-40051` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2021-40052.md) `CVE-2021-40052` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a man-in-the-middle attack vulnerability during system update download in recovery mode.](https://agentprime.io/advisories/CVE-2021-40055.md) `CVE-2021-40055` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module.](https://agentprime.io/advisories/CVE-2021-40061.md) `CVE-2021-40061` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an improper access control vulnerability in the video module.](https://agentprime.io/advisories/CVE-2021-40063.md) `CVE-2021-40063` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a heap-based buffer overflow vulnerability in system components.](https://agentprime.io/advisories/CVE-2021-40064.md) `CVE-2021-40064` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a memory address out of bounds in smartphones.](https://agentprime.io/advisories/CVE-2021-22429.md) `CVE-2021-22429` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a vulnerability when configuring permission isolation in smartphones.](https://agentprime.io/advisories/CVE-2021-22432.md) `CVE-2021-22432` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a logic bypass vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22430.md) `CVE-2021-22430` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds in smartphones.](https://agentprime.io/advisories/CVE-2021-22426.md) `CVE-2021-22426` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a vulnerability when configuring permission isolation in smartphones.](https://agentprime.io/advisories/CVE-2021-22431.md) `CVE-2021-22431` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds in smartphones.](https://agentprime.io/advisories/CVE-2021-22433.md) `CVE-2021-22433` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22434.md) `CVE-2021-22434` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a code injection vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22395.md) `CVE-2021-22395` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a buffer overflow vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22394.md) `CVE-2021-22394` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is an improper verification vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22319.md) `CVE-2021-22319` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a DoS vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22489.md) `CVE-2021-22489` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [The interface of a certain HarmonyOS module has an integer overflow vulnerability.](https://agentprime.io/advisories/CVE-2021-22480.md) `CVE-2021-22480` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [The interface of a certain HarmonyOS module has an invalid address access vulnerability.](https://agentprime.io/advisories/CVE-2021-22479.md) `CVE-2021-22479` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [The interface of a certain HarmonyOS module has a UAF vulnerability.](https://agentprime.io/advisories/CVE-2021-22478.md) `CVE-2021-22478` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [Some Huawei products have an integer overflow vulnerability.](https://agentprime.io/advisories/CVE-2021-22441.md) `CVE-2021-22441` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.](https://agentprime.io/advisories/CVE-2021-40015.md) `CVE-2021-40015` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-40045.md) `CVE-2021-40045` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40032.md) `CVE-2021-40032` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.](https://agentprime.io/advisories/CVE-2021-40028.md) `CVE-2021-40028` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-40027.md) `CVE-2021-40027` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .