Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-40025 CVE record

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40022 CVE record

The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40021 CVE record

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40018 CVE record

The eID module has a null pointer reference vulnerability.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40014 CVE record

The bone voice ID trusted application (TA) has a heap overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 7 Jan 2022
CVE-2021-40039 CVE record

There is a Null pointer dereference vulnerability in the camera module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40038 CVE record

There is a Double free vulnerability in the AOD module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40037 CVE record

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40035 CVE record

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40031 CVE record

There is a Null pointer dereference vulnerability in the camera module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40029 CVE record

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40026 CVE record

There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40009 CVE record

There is an Out-of-bounds write vulnerability in the AOD module in smartphones.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Jan 2022
CVE-2021-40006 CVE record

Vulnerability of design defects in the security algorithm component.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-254
Not analysed yet 7 Jan 2022
CVE-2021-40005 CVE record

The distributed data service component has a vulnerability in data access control.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40004 CVE record

The cellular module has a vulnerability in permission management.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40003 CVE record

HwPCAssistant has a path traversal vulnerability.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40002 CVE record

The Bluetooth module has an out-of-bounds write vulnerability.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40001 CVE record

The CaasKit module has a path traversal vulnerability.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-40000 CVE record

The Bluetooth module has an out-of-bounds write vulnerability.
- Huawei HarmonyOS
Not analysed yet 7 Jan 2022
CVE-2021-39974 CVE record

There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 3 Jan 2022
CVE-2021-39973 CVE record

There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 3 Jan 2022
CVE-2021-39969 CVE record

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 3 Jan 2022
CVE-2021-39967 CVE record

CVSS 7.5 High

There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service co…
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 3 Jan 2022
CVE-2021-39966 CVE record

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 3 Jan 2022
CVE-2021-37133 CVE record

CVSS 7.5 High

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 3 Jan 2022
CVE-2021-39990 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 3 Jan 2022
CVE-2021-39989 CVE record

CVSS 7.5 High

Incorrect type conversion in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-704
Not analysed yet 3 Jan 2022
CVE-2021-39988 CVE record

CVSS 7.5 High

NULL pointer dereference in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 3 Jan 2022
CVE-2021-39987 CVE record

CVSS 7.5 High

Type confusion in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 3 Jan 2022
CVE-2021-39985 CVE record

CVSS 7.5 High

Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
Not analysed yet 3 Jan 2022
CVE-2021-39984 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 3 Jan 2022
CVE-2021-39983 CVE record

CVSS 7.5 High

The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39977 CVE record

CVSS 7.5 High

NULL pointer dereference in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 3 Jan 2022
CVE-2021-37118 CVE record

The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37112 CVE record

Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39982 CVE record

Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notificati…
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39981 CVE record

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39980 CVE record

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39979 CVE record

HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39978 CVE record

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39975 CVE record

Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39972 CVE record

MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39971 CVE record

Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could compromise confidentiality.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39970 CVE record

HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-39968 CVE record

Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37134 CVE record

Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related components.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37132 CVE record

PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of H…
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37128 CVE record

HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37126 CVE record

Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause the directory is traversed.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37125 CVE record

Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause confidentiality is affected.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37116 CVE record

PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37098 CVE record

Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.
- Huawei HarmonyOS
Not analysed yet 3 Jan 2022
CVE-2021-37097 CVE record

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021
CVE-2021-37093 CVE record

There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021
CVE-2021-37092 CVE record

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021
CVE-2021-37075 CVE record

There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021
CVE-2021-37074 CVE record

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021
CVE-2021-37069 CVE record

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021
CVE-2021-37054 CVE record

There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 8 Dec 2021