# Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Protection mechanism failure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39011.md)
  `CVE-2022-39011` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-693
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-38998.md)
  `CVE-2022-38998` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-38986.md)
  `CVE-2022-38986` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-38985.md)
  `CVE-2022-38985` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-20
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-38984.md)
  `CVE-2022-38984` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-38983.md)
  `CVE-2022-38983` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Improper authentication in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-38982.md)
  `CVE-2022-38982` · CVE record: Huawei HarmonyOS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2022 · Tags: Authentication bypass
- [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-38981.md)
  `CVE-2022-38981` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Out-of-bounds write in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-38980.md)
  `CVE-2022-38980` · CVE record: Huawei HarmonyOS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Out-of-bounds write in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-38977.md)
  `CVE-2022-38977` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46840.md)
  `CVE-2021-46840` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46839.md)
  `CVE-2021-46839` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2022 · Tags: Memory corruption
- [The HwChrService module has a vulnerability in permission control.](https://agentprime.io/advisories/CVE-2022-39010.md)
  `CVE-2022-39010` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39009.md)
  `CVE-2022-39009` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2022 · Tags: Authentication bypass
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39001.md)
  `CVE-2022-39001` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2022 · Tags: Path traversal
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39007.md)
  `CVE-2022-39007` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2022 · Tags: Privilege escalation
- [The AOD module has the improper update of reference count vulnerability.](https://agentprime.io/advisories/CVE-2022-38999.md)
  `CVE-2022-38999` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38997.md)
  `CVE-2022-38997` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38996.md)
  `CVE-2022-38996` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38995.md)
  `CVE-2022-38995` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38994.md)
  `CVE-2022-38994` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38992.md)
  `CVE-2022-38992` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38991.md)
  `CVE-2022-38991` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38979.md)
  `CVE-2022-38979` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38978.md)
  `CVE-2022-38978` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38989.md)
  `CVE-2022-38989` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38988.md)
  `CVE-2022-38988` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The MPTCP module has the memory leak vulnerability.](https://agentprime.io/advisories/CVE-2022-39005.md)
  `CVE-2022-39005` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The MPTCP module has the memory leak vulnerability.](https://agentprime.io/advisories/CVE-2022-39004.md)
  `CVE-2022-39004` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38987.md)
  `CVE-2022-38987` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The MPTCP module has the race condition vulnerability.](https://agentprime.io/advisories/CVE-2022-39006.md)
  `CVE-2022-39006` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38993.md)
  `CVE-2022-38993` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38990.md)
  `CVE-2022-38990` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.](https://agentprime.io/advisories/CVE-2022-39000.md)
  `CVE-2022-39000` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Implementation of the WLAN module interfaces has the information disclosure vulnerability.](https://agentprime.io/advisories/CVE-2021-46836.md)
  `CVE-2021-46836` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Implementation of the WLAN module interfaces has the information disclosure vulnerability.](https://agentprime.io/advisories/CVE-2021-40024.md)
  `CVE-2021-40024` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Deserialization of untrusted data in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39008.md)
  `CVE-2022-39008` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2022 · Tags: Insecure deserialization
- [The My HUAWEI app has a defect in the design.](https://agentprime.io/advisories/CVE-2021-40030.md)
  `CVE-2021-40030` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022
- [Argument injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37005.md)
  `CVE-2022-37005` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Command injection
- [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37003.md)
  `CVE-2022-37003` · CVE record: Huawei HarmonyOS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Broken access control
- [The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).](https://agentprime.io/advisories/CVE-2022-37004.md)
  `CVE-2022-37004` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37002.md)
  `CVE-2022-37002` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.4 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Insufficient verification of data authenticity in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37008.md)
  `CVE-2022-37008` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: CWE-345
- [The diag-router module has a vulnerability in intercepting excessive long and short instructions.](https://agentprime.io/advisories/CVE-2022-37001.md)
  `CVE-2022-37001` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [The chinadrm module has an out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-37007.md)
  `CVE-2022-37007` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022
- [The video framework has the memory overwriting vulnerability caused by addition overflow.](https://agentprime.io/advisories/CVE-2021-40034.md)
  `CVE-2021-40034` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Vulnerability of pointers being incorrectly used during data transmission in the video framework.](https://agentprime.io/advisories/CVE-2021-40012.md)
  `CVE-2021-40012` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The SystemUI module has a vulnerability in permission control.](https://agentprime.io/advisories/CVE-2022-34738.md)
  `CVE-2022-34738` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The application security module has a vulnerability in permission assignment.](https://agentprime.io/advisories/CVE-2022-34737.md)
  `CVE-2022-34737` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The system module has a read/write vulnerability.](https://agentprime.io/advisories/CVE-2022-34742.md)
  `CVE-2022-34742` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The fingerprint module has a vulnerability of overflow in arithmetic addition.](https://agentprime.io/advisories/CVE-2022-34739.md)
  `CVE-2022-34739` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The NFC module has a buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2022-34741.md)
  `CVE-2022-34741` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The NFC module has a buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2022-34740.md)
  `CVE-2022-34740` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The AT commands of the USB port have an out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-34743.md)
  `CVE-2022-34743` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The frame scheduling module has a null pointer dereference vulnerability.](https://agentprime.io/advisories/CVE-2022-34736.md)
  `CVE-2022-34736` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The frame scheduling module has a null pointer dereference vulnerability.](https://agentprime.io/advisories/CVE-2022-34735.md)
  `CVE-2022-34735` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The basic framework and setting module have defects, which were introduced during the design.](https://agentprime.io/advisories/CVE-2021-46741.md)
  `CVE-2021-46741` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [HwSEServiceAPP has a vulnerability in permission management.](https://agentprime.io/advisories/CVE-2021-46811.md)
  `CVE-2021-46811` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The voice wakeup module has a vulnerability of using externally-controlled format strings.](https://agentprime.io/advisories/CVE-2022-31753.md)
  `CVE-2022-31753` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The setting module has a vulnerability of improper use of APIs.](https://agentprime.io/advisories/CVE-2022-31757.md)
  `CVE-2022-31757` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022

Newest: <https://agentprime.io/advisories/technology/huawei-harmonyos.md>
Older: <https://agentprime.io/advisories/technology/huawei-harmonyos.md?cursor=WyIyMDIyLTA2LTEzVDE1OjA1OjQ4LjAwMDAwMFoiLCJDVkUtMjAyMi0zMTc1NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-harmonyos&cursor=WyIyMDIyLTEwLTE0VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00MTU3NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-harmonyos/?cursor=WyIyMDIyLTEwLTE0VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00MTU3NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.