# Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-44104.md)
  `CVE-2023-44104` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44103.md)
  `CVE-2023-44103` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-20
- [Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.](https://agentprime.io/advisories/CVE-2023-44102.md)
  `CVE-2023-44102` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023
- [The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.](https://agentprime.io/advisories/CVE-2023-44101.md)
  `CVE-2023-44101` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 11 Oct 2023
- [Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-44100.md)
  `CVE-2023-44100` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44097.md)
  `CVE-2023-44097` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: Information disclosure
- [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44095.md)
  `CVE-2023-44095` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: Memory corruption
- [Type confusion in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44094.md)
  `CVE-2023-44094` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: Memory corruption
- [Injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44109.md)
  `CVE-2023-44109` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: Other injection
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44096.md)
  `CVE-2023-44096` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: Authentication bypass
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44093.md)
  `CVE-2023-44093` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: Information disclosure
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48606.md)
  `CVE-2022-48606` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Memory corruption
- [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-4565.md)
  `CVE-2023-4565` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2023 · Tags: Broken access control
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41312.md)
  `CVE-2023-41312` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Privilege escalation
- [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41311.md)
  `CVE-2023-41311` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Broken access control
- [Keep-alive vulnerability in the sticky broadcast mechanism.](https://agentprime.io/advisories/CVE-2023-41310.md)
  `CVE-2023-41310` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41309.md)
  `CVE-2023-41309` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Privilege escalation
- [Sensitive information in log files in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41308.md)
  `CVE-2023-41308` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Information disclosure
- [Memory overwriting vulnerability in the security module.](https://agentprime.io/advisories/CVE-2023-41307.md)
  `CVE-2023-41307` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023
- [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41306.md)
  `CVE-2023-41306` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Race condition
- [Weak encryption in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41305.md)
  `CVE-2023-41305` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 26 Sept 2023 · Tags: Weak cryptography or TLS
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41303.md)
  `CVE-2023-41303` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-20
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48605.md)
  `CVE-2022-48605` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-20
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41293.md)
  `CVE-2023-41293` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Information disclosure, CWE-227
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41302.md)
  `CVE-2023-41302` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Path traversal
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41301.md)
  `CVE-2023-41301` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Privilege escalation
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41300.md)
  `CVE-2023-41300` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-20
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41299.md)
  `CVE-2023-41299` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Vulnerability of permission control in the window module.](https://agentprime.io/advisories/CVE-2023-41298.md)
  `CVE-2023-41298` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023
- [Vulnerability of defects introduced in the design process in the HiviewTunner module.](https://agentprime.io/advisories/CVE-2023-41297.md)
  `CVE-2023-41297` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023
- [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41296.md)
  `CVE-2023-41296` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Broken access control
- [Vulnerability of improper permission management in the displayengine module.](https://agentprime.io/advisories/CVE-2023-41295.md)
  `CVE-2023-41295` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023
- [Uncontrolled resource consumption in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2023-41294.md)
  `CVE-2023-41294` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Denial of service
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39409.md)
  `CVE-2023-39409` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39408.md)
  `CVE-2023-39408` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Path traversal in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2023-39407.md)
  `CVE-2023-39407` · CVE record: Huawei HarmonyOS · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Path traversal
- [Vulnerability of defects introduced in the design process in the Multi-Device Task Center.](https://agentprime.io/advisories/CVE-2021-46895.md)
  `CVE-2021-46895` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-701
- [Permission control vulnerability in the XLayout component.](https://agentprime.io/advisories/CVE-2023-39406.md)
  `CVE-2023-39406` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39404.md)
  `CVE-2023-39404` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39403.md)
  `CVE-2023-39403` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-358
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39402.md)
  `CVE-2023-39402` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Path traversal, Broken access control
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39401.md)
  `CVE-2023-39401` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Path traversal, Broken access control
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39400.md)
  `CVE-2023-39400` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Path traversal, Broken access control
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39399.md)
  `CVE-2023-39399` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-275
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39398.md)
  `CVE-2023-39398` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-275
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39397.md)
  `CVE-2023-39397` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption
- [Mismatch vulnerability in the serialization process in the communication system.](https://agentprime.io/advisories/CVE-2023-39395.md)
  `CVE-2023-39395` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-19
- [Vulnerability of API privilege escalation in the wifienhance module.](https://agentprime.io/advisories/CVE-2023-39394.md)
  `CVE-2023-39394` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Vulnerability of system file information leakage in the USB Service module.](https://agentprime.io/advisories/CVE-2023-39391.md)
  `CVE-2023-39391` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39390.md)
  `CVE-2023-39390` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20, CWE-116
- [Vulnerability of permission control in the window management module.](https://agentprime.io/advisories/CVE-2023-39387.md)
  `CVE-2023-39387` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39386.md)
  `CVE-2023-39386` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption, CWE-116
- [Vulnerability of configuration defects in the media module of certain products..](https://agentprime.io/advisories/CVE-2023-39385.md)
  `CVE-2023-39385` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-16
- [Vulnerability of incomplete permission verification in the input method module.](https://agentprime.io/advisories/CVE-2023-39384.md)
  `CVE-2023-39384` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39383.md)
  `CVE-2023-39383` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Information disclosure
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39382.md)
  `CVE-2023-39382` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20, CWE-116
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39381.md)
  `CVE-2023-39381` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20, CWE-116
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39380.md)
  `CVE-2023-39380` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Authentication bypass, CWE-264
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39405.md)
  `CVE-2023-39405` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39396.md)
  `CVE-2023-39396` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/huawei-harmonyos.md>
Older: <https://agentprime.io/advisories/technology/huawei-harmonyos.md?cursor=WyIyMDIzLTA4LTEzVDExOjM1OjQyLjI1OTAwMFoiLCJDVkUtMjAyMy0zOTM5NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-harmonyos&cursor=WyIyMDIzLTEwLTExVDExOjU1OjEwLjM1MjAwMFoiLCJDVkUtMjAyMy00NDEwNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-harmonyos/?cursor=WyIyMDIzLTEwLTExVDExOjU1OjEwLjM1MjAwMFoiLCJDVkUtMjAyMy00NDEwNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.