Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-46323 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46322 CVE record

CVSS 7.5 High

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46321 CVE record

CVSS 7.5 High

The Wi-Fi module has a vulnerability in permission verification.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 Dec 2022
CVE-2022-46320 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46319 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46318 CVE record

CVSS 5.3 Medium

The HAware module has a function logic error.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 Dec 2022
CVE-2022-46317 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46316 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
Not analysed yet 20 Dec 2022
CVE-2022-46315 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 20 Dec 2022
CVE-2022-46314 CVE record

CVSS 7.5 High

Improper resource shutdown in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
Not analysed yet 20 Dec 2022
CVE-2022-46313 CVE record

CVSS 5.3 Medium

Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
Not analysed yet 20 Dec 2022
CVE-2022-46312 CVE record

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 20 Dec 2022
CVE-2022-46311 CVE record

CVSS 7.5 High

Use after free in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46310 CVE record

CVSS 7.5 High

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 20 Dec 2022
CVE-2022-41599 CVE record

CVSS 7.5 High

The system service has a vulnerability that causes incorrect return values.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 Dec 2022
CVE-2022-41596 CVE record

CVSS 7.5 High

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 20 Dec 2022
CVE-2022-41591 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 20 Dec 2022
CVE-2022-41590 CVE record

CVSS 5.5 Medium

Improper authentication in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
Not analysed yet 20 Dec 2022
CVE-2021-46856 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 20 Dec 2022
CVE-2022-44563 CVE record

CVSS 5.9 Medium

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 9 Nov 2022
CVE-2022-44562 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 9 Nov 2022
CVE-2022-44561 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44560 CVE record

CVSS 5.3 Medium

Open redirect in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Open redirect
Not analysed yet 9 Nov 2022
CVE-2022-44559 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 9 Nov 2022
CVE-2022-44558 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 9 Nov 2022
CVE-2022-44557 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44555 CVE record

CVSS 7.5 High

Authentication bypass by replay in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Nov 2022
CVE-2022-44554 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44553 CVE record

CVSS 5.3 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 9 Nov 2022
CVE-2022-44552 CVE record

CVSS 7.5 High

Improper resource shutdown in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 9 Nov 2022
CVE-2022-44551 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 9 Nov 2022
CVE-2022-44550 CVE record

CVSS 7.5 High

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-44549 CVE record

CVSS 7.5 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44548 CVE record

CVSS 4.3 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44547 CVE record

CVSS 7.5 High

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-44546 CVE record

CVSS 7.5 High

Incomplete cleanup in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-459
Not analysed yet 9 Nov 2022
CVE-2021-46852 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Nov 2022
CVE-2021-46851 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-41603 CVE record

CVSS 3.4 Low

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41602 CVE record

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the finger…
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 14 Oct 2022
CVE-2022-41601 CVE record

CVSS 3.4 Low

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41600 CVE record

CVSS 3.4 Low

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41598 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41597 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41595 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41594 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41593 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41592 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41589 CVE record

CVSS 7.5 High

The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-703
Not analysed yet 14 Oct 2022
CVE-2022-41588 CVE record

CVSS 7.5 High

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1264
Not analysed yet 14 Oct 2022
CVE-2022-41586 CVE record

CVSS 7.5 High

The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-130
Not analysed yet 14 Oct 2022
CVE-2022-41585 CVE record

CVSS 7.8 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41584 CVE record

CVSS 7.8 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41583 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41582 CVE record

CVSS 7.5 High

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-15
Not analysed yet 14 Oct 2022
CVE-2022-41581 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41580 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41578 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41577 CVE record

CVSS 7.1 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41576 CVE record

CVSS 7.8 High

Code injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Code injection
Not analysed yet 14 Oct 2022