Advisories · Technology
Huawei HarmonyOS.
Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.7 Medium
Permission control vulnerability in the distributed clipboard module.
- Huawei HarmonyOS
- CWE-275
- CVSS 6.8 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.2 Medium
Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
- CVSS 6.2 Medium
Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
- CVSS 5.9 Medium
Iterator failure vulnerability in the card management module.
- Huawei HarmonyOS
- CWE-664
- CVSS 5.9 Medium
Iterator failure vulnerability in the card management module.
- Huawei HarmonyOS
- CWE-664
- CVSS 7.3 High
EXTRA_REFERRER resource read vulnerability in the Gallery module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
- CVSS 5.4 Medium
Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
- CVSS 5.4 Medium
Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.2 Medium
Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.
- Huawei HarmonyOS
- CWE-264
- CVSS 7.7 High
Improper certificate validation in Huawei HarmonyOS
- Huawei HarmonyOS
- Weak cryptography or TLS
- CVSS 7.3 High
Status verification vulnerability in the lock screen module.
- Huawei HarmonyOS
- CWE-840
- CVSS 8.1 High
Time-of-check time-of-use race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
- CVSS 8.4 High
Path traversal in Huawei HarmonyOS
- Huawei HarmonyOS
- Path traversal
- CVSS 8.4 High
Path traversal in Huawei HarmonyOS
- Huawei HarmonyOS
- Path traversal
- CVSS 5.9 Medium
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
- CVSS 6.6 Medium
Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.8 Medium
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
- CVSS 3.9 Low
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
- CVSS 3.3 Low
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 5.3 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
Stack-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 4.0 Medium
NULL pointer dereference in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 7.6 High
Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
- CVSS 5.7 Medium
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera w…
- Huawei HarmonyOS
- CWE-275
- CVSS 6.9 Medium
Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-305
- CVSS 6.7 Medium
Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-567
- CVSS 8.2 High
Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Privilege escalation
- CVSS 5.5 Medium
Heap-based buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 7.1 High
Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
- CVSS 4.0 Medium
Resource allocation without limits in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
- CVSS 6.2 Medium
Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-248
- CVSS 8.8 High
Authentication bypass by spoofing in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
- CVSS 8.1 High
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.
- Huawei HarmonyOS
- CWE-1068
- CVSS 4.4 Medium
Authentication bypass in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
- CVSS 7.8 High
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-264
- CVSS 6.6 Medium
Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-118
- CVSS 5.1 Medium
Uncontrolled resource consumption in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
- CVSS 4.4 Medium
NULL pointer dereference in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 6.2 Medium
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-602
- CVSS 6.3 Medium
Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
- CVSS 4.4 Medium
Improper access control in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
- CVSS 4.4 Medium
Improper access control in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
- CVSS 6.2 Medium
Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
- CVSS 6.2 Medium
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-264
- CVSS 5.1 Medium
Missing authorization in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
- CVSS 7.5 High
Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CVSS 7.8 High
Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-280
- CVSS 8.4 High
Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization