# Huawei HarmonyOS. Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40025.md) `CVE-2021-40025` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40022.md) `CVE-2021-40022` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40021.md) `CVE-2021-40021` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The eID module has a null pointer reference vulnerability.](https://agentprime.io/advisories/CVE-2021-40018.md) `CVE-2021-40018` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The bone voice ID trusted application (TA) has a heap overflow vulnerability.](https://agentprime.io/advisories/CVE-2021-40014.md) `CVE-2021-40014` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Null pointer dereference vulnerability in the camera module in smartphones.](https://agentprime.io/advisories/CVE-2021-40039.md) `CVE-2021-40039` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Double free vulnerability in the AOD module in smartphones.](https://agentprime.io/advisories/CVE-2021-40038.md) `CVE-2021-40038` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones.](https://agentprime.io/advisories/CVE-2021-40037.md) `CVE-2021-40037` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.](https://agentprime.io/advisories/CVE-2021-40035.md) `CVE-2021-40035` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Null pointer dereference vulnerability in the camera module in smartphones.](https://agentprime.io/advisories/CVE-2021-40031.md) `CVE-2021-40031` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.](https://agentprime.io/advisories/CVE-2021-40029.md) `CVE-2021-40029` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones.](https://agentprime.io/advisories/CVE-2021-40026.md) `CVE-2021-40026` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is an Out-of-bounds write vulnerability in the AOD module in smartphones.](https://agentprime.io/advisories/CVE-2021-40009.md) `CVE-2021-40009` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [Vulnerability of design defects in the security algorithm component.](https://agentprime.io/advisories/CVE-2021-40006.md) `CVE-2021-40006` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 · Tags: CWE-254 - [The distributed data service component has a vulnerability in data access control.](https://agentprime.io/advisories/CVE-2021-40005.md) `CVE-2021-40005` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The cellular module has a vulnerability in permission management.](https://agentprime.io/advisories/CVE-2021-40004.md) `CVE-2021-40004` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [HwPCAssistant has a path traversal vulnerability.](https://agentprime.io/advisories/CVE-2021-40003.md) `CVE-2021-40003` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The Bluetooth module has an out-of-bounds write vulnerability.](https://agentprime.io/advisories/CVE-2021-40002.md) `CVE-2021-40002` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The CaasKit module has a path traversal vulnerability.](https://agentprime.io/advisories/CVE-2021-40001.md) `CVE-2021-40001` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [The Bluetooth module has an out-of-bounds write vulnerability.](https://agentprime.io/advisories/CVE-2021-40000.md) `CVE-2021-40000` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-39974.md) `CVE-2021-39974` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.](https://agentprime.io/advisories/CVE-2021-39973.md) `CVE-2021-39973` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-39969.md) `CVE-2021-39969` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service co…](https://agentprime.io/advisories/CVE-2021-39967.md) `CVE-2021-39967` · CVE record: Huawei EMUI and 2 more · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 - [There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-39966.md) `CVE-2021-39966` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-37133.md) `CVE-2021-37133` · CVE record: Huawei EMUI and 2 more · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 - [Out-of-bounds write in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39990.md) `CVE-2021-39990` · CVE record: Huawei HarmonyOS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jan 2022 · Tags: Memory corruption - [Incorrect type conversion in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39989.md) `CVE-2021-39989` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 · Tags: CWE-704 - [NULL pointer dereference in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39988.md) `CVE-2021-39988` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 · Tags: Memory corruption - [Type confusion in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39987.md) `CVE-2021-39987` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 · Tags: Memory corruption - [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39985.md) `CVE-2021-39985` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 · Tags: CWE-129 - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39984.md) `CVE-2021-39984` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 · Tags: Memory corruption - [The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart.](https://agentprime.io/advisories/CVE-2021-39983.md) `CVE-2021-39983` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 - [NULL pointer dereference in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2021-39977.md) `CVE-2021-39977` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 3 Jan 2022 · Tags: Memory corruption - [The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.](https://agentprime.io/advisories/CVE-2021-37118.md) `CVE-2021-37118` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.](https://agentprime.io/advisories/CVE-2021-37112.md) `CVE-2021-37112` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notificati…](https://agentprime.io/advisories/CVE-2021-39982.md) `CVE-2021-39982` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call.](https://agentprime.io/advisories/CVE-2021-39981.md) `CVE-2021-39981` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure.](https://agentprime.io/advisories/CVE-2021-39980.md) `CVE-2021-39980` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.](https://agentprime.io/advisories/CVE-2021-39979.md) `CVE-2021-39979` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.](https://agentprime.io/advisories/CVE-2021-39978.md) `CVE-2021-39978` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.](https://agentprime.io/advisories/CVE-2021-39975.md) `CVE-2021-39975` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality.](https://agentprime.io/advisories/CVE-2021-39972.md) `CVE-2021-39972` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could compromise confidentiality.](https://agentprime.io/advisories/CVE-2021-39971.md) `CVE-2021-39971` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission.](https://agentprime.io/advisories/CVE-2021-39970.md) `CVE-2021-39970` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class.](https://agentprime.io/advisories/CVE-2021-39968.md) `CVE-2021-39968` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related components.](https://agentprime.io/advisories/CVE-2021-37134.md) `CVE-2021-37134` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of H…](https://agentprime.io/advisories/CVE-2021-37132.md) `CVE-2021-37132` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.](https://agentprime.io/advisories/CVE-2021-37128.md) `CVE-2021-37128` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause the directory is traversed.](https://agentprime.io/advisories/CVE-2021-37126.md) `CVE-2021-37126` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause confidentiality is affected.](https://agentprime.io/advisories/CVE-2021-37125.md) `CVE-2021-37125` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.](https://agentprime.io/advisories/CVE-2021-37116.md) `CVE-2021-37116` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.](https://agentprime.io/advisories/CVE-2021-37098.md) `CVE-2021-37098` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 3 Jan 2022 - [There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.](https://agentprime.io/advisories/CVE-2021-37097.md) `CVE-2021-37097` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.](https://agentprime.io/advisories/CVE-2021-37093.md) `CVE-2021-37093` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.](https://agentprime.io/advisories/CVE-2021-37092.md) `CVE-2021-37092` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.](https://agentprime.io/advisories/CVE-2021-37075.md) `CVE-2021-37075` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.](https://agentprime.io/advisories/CVE-2021-37074.md) `CVE-2021-37074` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.](https://agentprime.io/advisories/CVE-2021-37069.md) `CVE-2021-37069` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-37054.md) `CVE-2021-37054` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .