# Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46885.md)
  `CVE-2021-46885` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46884.md)
  `CVE-2021-46884` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46883.md)
  `CVE-2021-46883` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46882.md)
  `CVE-2021-46882` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46881.md)
  `CVE-2021-46881` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Observable discrepancy in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1696.md)
  `CVE-2023-1696` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023 · Tags: Information disclosure
- [The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.](https://agentprime.io/advisories/CVE-2023-1694.md)
  `CVE-2023-1694` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023
- [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1693.md)
  `CVE-2023-1693` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023 · Tags: Broken access control
- [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1692.md)
  `CVE-2023-1692` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023 · Tags: Broken access control
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48314.md)
  `CVE-2022-48314` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2023 · Tags: Authentication bypass
- [Insecure direct object reference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48313.md)
  `CVE-2022-48313` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2023 · Tags: Broken access control
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48312.md)
  `CVE-2022-48312` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2023 · Tags: Memory corruption
- [The SystemUI module has a vulnerability of repeated app restart due to improper parameters.](https://agentprime.io/advisories/CVE-2023-26549.md)
  `CVE-2023-26549` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-233
- [The pgmng module has a vulnerability in serialization/deserialization.](https://agentprime.io/advisories/CVE-2023-26548.md)
  `CVE-2023-26548` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The InputMethod module has a vulnerability of serialization/deserialization mismatch.](https://agentprime.io/advisories/CVE-2023-26547.md)
  `CVE-2023-26547` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The Always On Display (AOD) has a path traversal vulnerability in theme files.](https://agentprime.io/advisories/CVE-2022-48361.md)
  `CVE-2022-48361` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The facial recognition module has a vulnerability in file permission control.](https://agentprime.io/advisories/CVE-2022-48360.md)
  `CVE-2022-48360` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Mass assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48359.md)
  `CVE-2022-48359` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: Broken access control
- [The BatteryHealthActivity has a redirection vulnerability.](https://agentprime.io/advisories/CVE-2022-48358.md)
  `CVE-2022-48358` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Resource allocation without limits in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48357.md)
  `CVE-2022-48357` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: Denial of service
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48356.md)
  `CVE-2022-48356` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-20
- [The Bluetooth module has a heap out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-48355.md)
  `CVE-2022-48355` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The Bluetooth module has a heap out-of-bounds write vulnerability.](https://agentprime.io/advisories/CVE-2022-48354.md)
  `CVE-2022-48354` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48353.md)
  `CVE-2022-48353` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2023 · Tags: Privilege escalation
- [Some smartphones have data initialization issues.](https://agentprime.io/advisories/CVE-2022-48352.md)
  `CVE-2022-48352` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-665
- [Uncontrolled resource consumption in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48351.md)
  `CVE-2022-48351` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2023 · Tags: Denial of service
- [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48350.md)
  `CVE-2022-48350` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2023 · Tags: Broken access control
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48349.md)
  `CVE-2022-48349` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2023 · Tags: Authentication bypass
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48348.md)
  `CVE-2022-48348` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2023 · Tags: Information disclosure
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48347.md)
  `CVE-2022-48347` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: Information disclosure
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48346.md)
  `CVE-2022-48346` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: Information disclosure
- [The Bluetooth module has an authentication bypass vulnerability in the pairing process.](https://agentprime.io/advisories/CVE-2022-48291.md)
  `CVE-2022-48291` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48302.md)
  `CVE-2022-48302` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Broken access control
- [The bundle management module lacks permission verification in some APIs.](https://agentprime.io/advisories/CVE-2022-48301.md)
  `CVE-2022-48301` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-281
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48300.md)
  `CVE-2022-48300` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Authentication bypass
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48299.md)
  `CVE-2022-48299` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Authentication bypass
- [The geofencing kernel code does not verify the length of the input data.](https://agentprime.io/advisories/CVE-2022-48298.md)
  `CVE-2022-48298` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-1284
- [The geofencing kernel code has a vulnerability of not verifying the length of the input data.](https://agentprime.io/advisories/CVE-2022-48297.md)
  `CVE-2022-48297` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-1284
- [The SystemUI has a vulnerability in permission management.](https://agentprime.io/advisories/CVE-2022-48296.md)
  `CVE-2022-48296` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-281
- [The IHwAntiMalPlugin interface lacks permission verification.](https://agentprime.io/advisories/CVE-2022-48295.md)
  `CVE-2022-48295` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-281
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48294.md)
  `CVE-2022-48294` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Authentication bypass
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48293.md)
  `CVE-2022-48293` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Feb 2023 · Tags: Memory corruption
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48292.md)
  `CVE-2022-48292` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Feb 2023 · Tags: Memory corruption
- [Protection mechanism failure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-48290.md)
  `CVE-2022-48290` · CVE record: Huawei HarmonyOS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-693
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48289.md)
  `CVE-2022-48289` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Authentication bypass
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48288.md)
  `CVE-2022-48288` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Authentication bypass
- [Protection mechanism failure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48287.md)
  `CVE-2022-48287` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-693
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48286.md)
  `CVE-2022-48286` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: Privilege escalation
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-47976.md)
  `CVE-2022-47976` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2023 · Tags: Authentication bypass
- [Double free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-47975.md)
  `CVE-2022-47975` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2023 · Tags: Memory corruption
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-47974.md)
  `CVE-2022-47974` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Jan 2023 · Tags: Authentication bypass
- [Protection mechanism failure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46762.md)
  `CVE-2022-46762` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2023 · Tags: CWE-693
- [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46761.md)
  `CVE-2022-46761` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2023 · Tags: Broken access control
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46868.md)
  `CVE-2021-46868` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2023 · Tags: Memory corruption
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46867.md)
  `CVE-2021-46867` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2023 · Tags: Memory corruption
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46328.md)
  `CVE-2022-46328` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 Dec 2022 · Tags: CWE-20
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46327.md)
  `CVE-2022-46327` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2022 · Tags: Privilege escalation
- [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46326.md)
  `CVE-2022-46326` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46325.md)
  `CVE-2022-46325` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-46324.md)
  `CVE-2022-46324` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2022 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/huawei-harmonyos.md>
Older: <https://agentprime.io/advisories/technology/huawei-harmonyos.md?cursor=WyIyMDIyLTEyLTIwVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00NjMyNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-harmonyos&cursor=WyIyMDIzLTA1LTI2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMS00Njg4NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-harmonyos/?cursor=WyIyMDIzLTA1LTI2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMS00Njg4NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.