Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-39011 CVE record

CVSS 7.5 High

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 14 Oct 2022
CVE-2022-38998 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38986 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38985 CVE record

CVSS 7.5 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 14 Oct 2022
CVE-2022-38984 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38983 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38982 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
Not analysed yet 14 Oct 2022
CVE-2022-38981 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38980 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38977 CVE record

CVSS 7.5 High

Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2021-46840 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2021-46839 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-39010 CVE record

The HwChrService module has a vulnerability in permission control.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39009 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Sept 2022
CVE-2022-39001 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 16 Sept 2022
CVE-2022-39007 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 16 Sept 2022
CVE-2022-38999 CVE record

The AOD module has the improper update of reference count vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38997 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38996 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38995 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38994 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38992 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38991 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38979 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38978 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38989 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38988 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39005 CVE record

The MPTCP module has the memory leak vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39004 CVE record

The MPTCP module has the memory leak vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38987 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39006 CVE record

The MPTCP module has the race condition vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38993 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38990 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39000 CVE record

The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2021-46836 CVE record

Implementation of the WLAN module interfaces has the information disclosure vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2021-40024 CVE record

Implementation of the WLAN module interfaces has the information disclosure vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39008 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 16 Sept 2022
CVE-2021-40030 CVE record

CVSS 7.5 High

The My HUAWEI app has a defect in the design.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2022-37005 CVE record

CVSS 7.5 High

Argument injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Command injection
Not analysed yet 9 Aug 2022
CVE-2022-37003 CVE record

CVSS 6.5 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Aug 2022
CVE-2022-37004 CVE record

CVSS 7.5 High

The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2022-37002 CVE record

CVSS 7.4 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-37008 CVE record

CVSS 7.5 High

Insufficient verification of data authenticity in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-345
Not analysed yet 9 Aug 2022
CVE-2022-37001 CVE record

The diag-router module has a vulnerability in intercepting excessive long and short instructions.
- Huawei HarmonyOS
Not analysed yet 9 Aug 2022
CVE-2022-37007 CVE record

CVSS 7.5 High

The chinadrm module has an out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2021-40034 CVE record

The video framework has the memory overwriting vulnerability caused by addition overflow.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2021-40012 CVE record

Vulnerability of pointers being incorrectly used during data transmission in the video framework.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34738 CVE record

The SystemUI module has a vulnerability in permission control.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34737 CVE record

The application security module has a vulnerability in permission assignment.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34742 CVE record

The system module has a read/write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34739 CVE record

The fingerprint module has a vulnerability of overflow in arithmetic addition.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34741 CVE record

The NFC module has a buffer overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34740 CVE record

The NFC module has a buffer overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34743 CVE record

The AT commands of the USB port have an out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34736 CVE record

The frame scheduling module has a null pointer dereference vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34735 CVE record

The frame scheduling module has a null pointer dereference vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2021-46741 CVE record

The basic framework and setting module have defects, which were introduced during the design.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2021-46811 CVE record

HwSEServiceAPP has a vulnerability in permission management.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31753 CVE record

The voice wakeup module has a vulnerability of using externally-controlled format strings.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31757 CVE record

The setting module has a vulnerability of improper use of APIs.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022