Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-46812 CVE record

The Device Manager has a vulnerability in multi-device interaction.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31760 CVE record

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31762 CVE record

The AMS module has a vulnerability in input validation.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31759 CVE record

AppLink has a vulnerability of accessing uninitialized pointers.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31755 CVE record

The communication module has a vulnerability of improper permission preservation.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31756 CVE record

The fingerprint sensor module has design defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31751 CVE record

The kernel emcom module has multi-thread contention.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31758 CVE record

The kernel module has the race condition vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31763 CVE record

The kernel module has the null pointer and out-of-bounds array vulnerabilities.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2021-46814 CVE record

The video framework has an out-of-bounds memory read/write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-29796 CVE record

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29795 CVE record

The frame scheduling module has a null pointer dereference vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29794 CVE record

The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29792 CVE record

The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29791 CVE record

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29790 CVE record

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29789 CVE record

The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-22261 CVE record

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-22260 CVE record

The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-46787 CVE record

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-46786 CVE record

The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-46785 CVE record

The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-40065 CVE record

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2021-46740 CVE record

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22253 CVE record

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2021-46742 CVE record

The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22254 CVE record

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22255 CVE record

The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22256 CVE record

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22257 CVE record

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2021-40047 CVE record

There is a vulnerability of memory not being released after effective lifetime in the Bastet module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40048 CVE record

There is an incorrect buffer size calculation vulnerability in the video framework.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40049 CVE record

There is a permission control vulnerability in the PMS module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40050 CVE record

There is an out-of-bounds read vulnerability in the IFAA module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40051 CVE record

There is an unauthorized access vulnerability in system components.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40052 CVE record

There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 7 Mar 2022
CVE-2021-40055 CVE record

There is a man-in-the-middle attack vulnerability during system update download in recovery mode.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40061 CVE record

There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40063 CVE record

There is an improper access control vulnerability in the video module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40064 CVE record

There is a heap-based buffer overflow vulnerability in system components.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-22429 CVE record

There is a memory address out of bounds in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22432 CVE record

There is a vulnerability when configuring permission isolation in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22430 CVE record

There is a logic bypass vulnerability in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22426 CVE record

There is a memory address out of bounds in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22431 CVE record

There is a vulnerability when configuring permission isolation in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22433 CVE record

There is a memory address out of bounds in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22434 CVE record

There is a memory address out of bounds vulnerability in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22395 CVE record

There is a code injection vulnerability in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22394 CVE record

There is a buffer overflow vulnerability in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22319 CVE record

There is an improper verification vulnerability in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22489 CVE record

There is a DoS vulnerability in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 25 Feb 2022
CVE-2021-22480 CVE record

The interface of a certain HarmonyOS module has an integer overflow vulnerability.
- Huawei HarmonyOS
Not analysed yet 25 Feb 2022
CVE-2021-22479 CVE record

The interface of a certain HarmonyOS module has an invalid address access vulnerability.
- Huawei HarmonyOS
Not analysed yet 25 Feb 2022
CVE-2021-22478 CVE record

The interface of a certain HarmonyOS module has a UAF vulnerability.
- Huawei HarmonyOS
Not analysed yet 25 Feb 2022
CVE-2021-22441 CVE record

Some Huawei products have an integer overflow vulnerability.
- Huawei HarmonyOS
Not analysed yet 25 Feb 2022
CVE-2021-40015 CVE record

There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 9 Feb 2022
CVE-2021-40045 CVE record

There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 9 Feb 2022
CVE-2021-40032 CVE record

The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 7 Jan 2022
CVE-2021-40028 CVE record

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40027 CVE record

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 7 Jan 2022