# Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39393.md)
  `CVE-2023-39393` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Information disclosure
- [Vulnerability of insecure signatures in the OsuLogin module.](https://agentprime.io/advisories/CVE-2023-39392.md)
  `CVE-2023-39392` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-16
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39389.md)
  `CVE-2023-39389` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption, CWE-1285
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39388.md)
  `CVE-2023-39388` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption, CWE-1285
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48520.md)
  `CVE-2022-48520` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48519.md)
  `CVE-2022-48519` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent.](https://agentprime.io/advisories/CVE-2022-48518.md)
  `CVE-2022-48518` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-701
- [Improper handling of exceptional conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1695.md)
  `CVE-2023-1695` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-755
- [Vulnerability of failures to capture exceptions in the communication framework.](https://agentprime.io/advisories/CVE-2023-1691.md)
  `CVE-2023-1691` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-248
- [Unauthorized service access vulnerability in the DSoftBus module.](https://agentprime.io/advisories/CVE-2022-48517.md)
  `CVE-2022-48517` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-701
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48516.md)
  `CVE-2022-48516` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48515.md)
  `CVE-2022-48515` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Privilege escalation
- [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-48514.md)
  `CVE-2022-48514` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48513.md)
  `CVE-2022-48513` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Authentication bypass
- [Encryption bypass vulnerability in Maintenance mode.](https://agentprime.io/advisories/CVE-2021-46892.md)
  `CVE-2021-46892` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-701
- [Type confusion in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48511.md)
  `CVE-2022-48511` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48510.md)
  `CVE-2022-48510` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48509.md)
  `CVE-2022-48509` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Authentication bypass by replay in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48507.md)
  `CVE-2022-48507` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Authentication bypass
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34164.md)
  `CVE-2023-34164` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-3456.md)
  `CVE-2023-3456` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-20
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37245.md)
  `CVE-2023-37245` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Insecure direct object reference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37242.md)
  `CVE-2023-37242` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Broken access control
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37241.md)
  `CVE-2023-37241` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-20
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37240.md)
  `CVE-2023-37240` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37239.md)
  `CVE-2023-37239` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.](https://agentprime.io/advisories/CVE-2023-37238.md)
  `CVE-2023-37238` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-275
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46894.md)
  `CVE-2021-46894` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Privilege escalation
- [Heap-based buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48512.md)
  `CVE-2022-48512` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Inappropriate authorization vulnerability in the system apps.](https://agentprime.io/advisories/CVE-2022-48508.md)
  `CVE-2022-48508` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-264
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-3455.md)
  `CVE-2023-3455` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: Information disclosure
- [Vulnerability of unstrict data verification and parameter check.](https://agentprime.io/advisories/CVE-2021-46893.md)
  `CVE-2021-46893` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: CWE-1284
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46891.md)
  `CVE-2021-46891` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: Information disclosure
- [Vulnerability of incomplete read and write permission verification in the GPU module.](https://agentprime.io/advisories/CVE-2021-46890.md)
  `CVE-2021-46890` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34167.md)
  `CVE-2023-34167` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Resource allocation without limits in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34166.md)
  `CVE-2023-34166` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Denial of service
- [Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.](https://agentprime.io/advisories/CVE-2023-34163.md)
  `CVE-2023-34163` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023
- [Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.](https://agentprime.io/advisories/CVE-2023-34162.md)
  `CVE-2023-34162` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023
- [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34161.md)
  `CVE-2023-34161` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Broken access control
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34160.md)
  `CVE-2023-34160` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.](https://agentprime.io/advisories/CVE-2023-34159.md)
  `CVE-2023-34159` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2023
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34158.md)
  `CVE-2023-34158` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Session fixation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34156.md)
  `CVE-2023-34156` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2023-34155.md)
  `CVE-2023-34155` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48496.md)
  `CVE-2022-48496` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained.](https://agentprime.io/advisories/CVE-2022-48495.md)
  `CVE-2022-48495` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48494.md)
  `CVE-2022-48494` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.](https://agentprime.io/advisories/CVE-2022-48491.md)
  `CVE-2022-48491` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48488.md)
  `CVE-2022-48488` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Broken access control
- [Authentication bypass by spoofing in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2023-34157.md)
  `CVE-2023-34157` · CVE record: Huawei HarmonyOS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2023 · Tags: Authentication bypass
- [Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access wi…](https://agentprime.io/advisories/CVE-2023-34165.md)
  `CVE-2023-34165` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 16 Jun 2023
- [Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system…](https://agentprime.io/advisories/CVE-2023-34154.md)
  `CVE-2023-34154` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 16 Jun 2023
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-31227.md)
  `CVE-2023-31227` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Authentication bypass
- [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-31226.md)
  `CVE-2023-31226` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Broken access control
- [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-31225.md)
  `CVE-2023-31225` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.3 Low · Not analysed yet · Published 26 May 2023 · Tags: Race condition
- [The online authentication provided by the hwKitAssistant lacks strict identity verification of applications.](https://agentprime.io/advisories/CVE-2023-0117.md)
  `CVE-2023-0117` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2023
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-0116.md)
  `CVE-2023-0116` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Authentication bypass
- [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2022-48479.md)
  `CVE-2022-48479` · CVE record: Huawei HarmonyOS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [The facial recognition TA of some products lacks memory length verification.](https://agentprime.io/advisories/CVE-2022-48478.md)
  `CVE-2022-48478` · CVE record: Huawei HarmonyOS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2023
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46886.md)
  `CVE-2021-46886` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/huawei-harmonyos.md>
Older: <https://agentprime.io/advisories/technology/huawei-harmonyos.md?cursor=WyIyMDIzLTA1LTI2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMS00Njg4NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-harmonyos&cursor=WyIyMDIzLTA4LTEzVDExOjM1OjQyLjI1OTAwMFoiLCJDVkUtMjAyMy0zOTM5NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-harmonyos/?cursor=WyIyMDIzLTA4LTEzVDExOjM1OjQyLjI1OTAwMFoiLCJDVkUtMjAyMy0zOTM5NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.