Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-31174 CVE record

CVSS 6.8 Medium

Path traversal in Huawei HarmonyOS
- Huawei HarmonyOS
- Path traversal
Not analysed yet 7 Apr 2025
CVE-2025-31173 CVE record

CVSS 8.8 High

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-280
Not analysed yet 7 Apr 2025
CVE-2025-31172 CVE record

CVSS 7.8 High

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-280
Not analysed yet 7 Apr 2025
CVE-2025-31171 CVE record

CVSS 6.8 Medium

Missing authorization in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
Not analysed yet 7 Apr 2025
CVE-2025-31170 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58127 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58126 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58125 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58124 CVE record

CVSS 8.4 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 7 Apr 2025
CVE-2024-58116 CVE record

CVSS 4.0 Medium

Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58115 CVE record

CVSS 4.0 Medium

Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58113 CVE record

CVSS 5.3 Medium

Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-399
Not analysed yet 7 Apr 2025
CVE-2024-58112 CVE record

CVSS 7.5 High

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-248
Not analysed yet 7 Apr 2025
CVE-2024-58111 CVE record

CVSS 7.5 High

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-248
Not analysed yet 7 Apr 2025
CVE-2024-58110 CVE record

CVSS 4.6 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58109 CVE record

CVSS 4.6 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58108 CVE record

CVSS 4.6 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58107 CVE record

CVSS 7.5 High

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58106 CVE record

CVSS 4.6 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 7 Apr 2025
CVE-2024-58050 CVE record

CVSS 6.2 Medium

Incorrect default permissions in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
Not analysed yet 4 Mar 2025
CVE-2024-58049 CVE record

CVSS 5.0 Medium

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 4 Mar 2025
CVE-2024-58048 CVE record

CVSS 6.7 Medium

Race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
Not analysed yet 4 Mar 2025
CVE-2024-58047 CVE record

CVSS 5.0 Medium

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 4 Mar 2025
CVE-2024-58046 CVE record

CVSS 6.2 Medium

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 4 Mar 2025
CVE-2024-58045 CVE record

CVSS 8.6 High

Race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
Not analysed yet 4 Mar 2025
CVE-2025-27521 CVE record

CVSS 6.8 Medium

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-280
Not analysed yet 4 Mar 2025
CVE-2024-58044 CVE record

CVSS 8.4 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 4 Mar 2025
CVE-2024-58043 CVE record

CVSS 7.3 High

Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 4 Mar 2025
CVE-2024-57962 CVE record

CVSS 6.1 Medium

Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-701
Not analysed yet 6 Feb 2025
CVE-2024-57961 CVE record

CVSS 6.8 Medium

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-57960 CVE record

CVSS 7.7 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Feb 2025
CVE-2024-57959 CVE record

CVSS 6.1 Medium

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-57958 CVE record

CVSS 5.7 Medium

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-12602 CVE record

CVSS 6.2 Medium

Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-300
Not analysed yet 6 Feb 2025
CVE-2024-57957 CVE record

CVSS 6.6 Medium

Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-657
Not analysed yet 6 Feb 2025
CVE-2024-57956 CVE record

CVSS 2.8 Low

Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-57955 CVE record

CVSS 6.1 Medium

Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 6 Feb 2025
CVE-2024-57954 CVE record

CVSS 6.2 Medium

Improper authorization in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
Not analysed yet 6 Feb 2025
CVE-2024-54121 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 8 Jan 2025
CVE-2024-56456 CVE record

CVSS 6.8 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56455 CVE record

CVSS 5.5 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56454 CVE record

CVSS 5.5 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56453 CVE record

CVSS 6.8 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56452 CVE record

CVSS 5.5 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56451 CVE record

CVSS 7.3 High

Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56450 CVE record

CVSS 6.3 Medium

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56449 CVE record

CVSS 6.6 Medium

Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 8 Jan 2025
CVE-2024-56448 CVE record

CVSS 6.7 Medium

Code injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Code injection
Not analysed yet 8 Jan 2025
CVE-2024-56447 CVE record

CVSS 7.8 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 8 Jan 2025
CVE-2024-56446 CVE record

CVSS 4.0 Medium

Use of uninitialized variable in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56445 CVE record

CVSS 4.3 Medium

Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
Not analysed yet 8 Jan 2025
CVE-2024-56444 CVE record

CVSS 7.5 High

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 8 Jan 2025
CVE-2024-56443 CVE record

CVSS 6.2 Medium

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 8 Jan 2025
CVE-2024-54120 CVE record

CVSS 4.1 Medium

Race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
Not analysed yet 8 Jan 2025
CVE-2024-56442 CVE record

CVSS 5.5 Medium

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-227
Not analysed yet 8 Jan 2025
CVE-2024-56441 CVE record

CVSS 4.1 Medium

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 8 Jan 2025
CVE-2024-56440 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 8 Jan 2025
CVE-2024-56439 CVE record

CVSS 7.5 High

Missing encryption of sensitive data in Huawei HarmonyOS
- Huawei HarmonyOS
- Weak cryptography or TLS
Not analysed yet 8 Jan 2025
CVE-2024-56438 CVE record

CVSS 6.0 Medium

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2024-56437 CVE record

CVSS 5.7 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 8 Jan 2025