Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-52955 CVE record

CVSS 6.5 Medium

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 8 Jan 2025
CVE-2023-52954 CVE record

CVSS 4.4 Medium

Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 8 Jan 2025
CVE-2023-52953 CVE record

CVSS 6.2 Medium

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 8 Jan 2025
CVE-2024-56436 CVE record

CVSS 5.5 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 8 Jan 2025
CVE-2024-56435 CVE record

CVSS 6.2 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 8 Jan 2025
CVE-2024-56434 CVE record

CVSS 4.4 Medium

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Jan 2025
CVE-2021-22484 CVE record

CVSS 7.5 High

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
- CWE-20
Not analysed yet 28 Dec 2024
CVE-2021-37000 CVE record

CVSS 7.7 High

Incorrect default permissions in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
- CWE-255
Not analysed yet 28 Dec 2024
CVE-2024-54122 CVE record

CVSS 6.2 Medium

Race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
Not analysed yet 12 Dec 2024
CVE-2024-54119 CVE record

CVSS 6.2 Medium

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 12 Dec 2024
CVE-2024-54117 CVE record

CVSS 6.2 Medium

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 12 Dec 2024
CVE-2024-54116 CVE record

CVSS 4.3 Medium

Improper check for unusual conditions in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-754
Not analysed yet 12 Dec 2024
CVE-2024-54115 CVE record

CVSS 4.3 Medium

Improper check for unusual conditions in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-754
Not analysed yet 12 Dec 2024
CVE-2024-54114 CVE record

CVSS 4.4 Medium

Improper check for unusual conditions in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-754
Not analysed yet 12 Dec 2024
CVE-2024-54113 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
Not analysed yet 12 Dec 2024
CVE-2024-54112 CVE record

CVSS 5.5 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 12 Dec 2024
CVE-2024-54111 CVE record

CVSS 5.7 Medium

Insufficient verification of data authenticity in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-345
Not analysed yet 12 Dec 2024
CVE-2024-54110 CVE record

CVSS 6.2 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 12 Dec 2024
CVE-2024-54109 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 12 Dec 2024
CVE-2024-54108 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 12 Dec 2024
CVE-2024-54107 CVE record

CVSS 7.1 High

Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 12 Dec 2024
CVE-2024-54106 CVE record

CVSS 7.1 High

Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Huawei HarmonyOS
- CWE-248
Not analysed yet 12 Dec 2024
CVE-2024-54105 CVE record

CVSS 5.1 Medium

Buffer overflow in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 12 Dec 2024
CVE-2024-54104 CVE record

CVSS 6.2 Medium

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 12 Dec 2024
CVE-2024-54103 CVE record

CVSS 6.1 Medium

Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 12 Dec 2024
CVE-2024-54102 CVE record

CVSS 6.1 Medium

Race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
Not analysed yet 12 Dec 2024
CVE-2024-54101 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 12 Dec 2024
CVE-2024-54100 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 12 Dec 2024
CVE-2024-54099 CVE record

CVSS 6.7 Medium

Files accessible to external parties in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 12 Dec 2024
CVE-2024-54098 CVE record

CVSS 8.5 High

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 12 Dec 2024
CVE-2024-54097 CVE record

CVSS 7.3 High

Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-15
Not analysed yet 12 Dec 2024
CVE-2024-54096 CVE record

CVSS 5.3 Medium

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 12 Dec 2024
CVE-2024-51530 CVE record

CVSS 6.6 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51529 CVE record

CVSS 5.5 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51528 CVE record

CVSS 4.0 Medium

Sensitive information in log files in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 5 Nov 2024
CVE-2024-51527 CVE record

CVSS 5.1 Medium

Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 5 Nov 2024
CVE-2024-51526 CVE record

CVSS 8.2 High

Improper signature verification in Huawei HarmonyOS
- Huawei HarmonyOS
- Weak cryptography or TLS
Not analysed yet 5 Nov 2024
CVE-2024-51525 CVE record

CVSS 6.2 Medium

Improper authorization in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
Not analysed yet 5 Nov 2024
CVE-2024-51524 CVE record

CVSS 4.0 Medium

Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 5 Nov 2024
CVE-2024-51523 CVE record

CVSS 7.1 High

Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 5 Nov 2024
CVE-2024-51522 CVE record

CVSS 6.2 Medium

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-199
Not analysed yet 5 Nov 2024
CVE-2024-51521 CVE record

CVSS 5.7 Medium

Improper privilege management in Huawei HarmonyOS
- Huawei HarmonyOS
- Privilege escalation
Not analysed yet 5 Nov 2024
CVE-2024-51520 CVE record

CVSS 5.5 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51519 CVE record

CVSS 5.0 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51518 CVE record

CVSS 5.3 Medium

Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-248
Not analysed yet 5 Nov 2024
CVE-2024-51517 CVE record

CVSS 5.1 Medium

Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
Not analysed yet 5 Nov 2024
CVE-2024-51516 CVE record

CVSS 6.2 Medium

Missing authorization in Huawei HarmonyOS
- Huawei HarmonyOS
- Broken access control
Not analysed yet 5 Nov 2024
CVE-2024-51515 CVE record

CVSS 6.2 Medium

Race condition in Huawei HarmonyOS
- Huawei HarmonyOS
- Race condition
Not analysed yet 5 Nov 2024
CVE-2024-51514 CVE record

CVSS 5.3 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51513 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
Not analysed yet 5 Nov 2024
CVE-2024-51512 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51511 CVE record

CVSS 6.2 Medium

Improper input validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-20
Not analysed yet 5 Nov 2024
CVE-2024-51510 CVE record

CVSS 7.6 High

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 5 Nov 2024
CVE-2024-9136 CVE record

CVSS 6.7 Medium

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 27 Sept 2024
CVE-2024-47294 CVE record

CVSS 4.4 Medium

Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 27 Sept 2024
CVE-2024-47293 CVE record

CVSS 4.7 Medium

Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-130
Not analysed yet 27 Sept 2024
CVE-2024-47292 CVE record

CVSS 6.2 Medium

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 27 Sept 2024
CVE-2024-47291 CVE record

CVSS 5.6 Medium

Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 27 Sept 2024
CVE-2024-47290 CVE record

CVSS 5.5 Medium

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 27 Sept 2024
CVE-2024-8298 CVE record

CVSS 6.2 Medium

Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 4 Sept 2024