Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-39393 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 13 Aug 2023
CVE-2023-39392 CVE record

Vulnerability of insecure signatures in the OsuLogin module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 13 Aug 2023
CVE-2023-39389 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CWE-1285
Not analysed yet 13 Aug 2023
CVE-2023-39388 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CWE-1285
Not analysed yet 13 Aug 2023
CVE-2022-48520 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48519 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48518 CVE record

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 6 Jul 2023
CVE-2023-1695 CVE record

Improper handling of exceptional conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-755
Not analysed yet 6 Jul 2023
CVE-2023-1691 CVE record

Vulnerability of failures to capture exceptions in the communication framework.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-248
Not analysed yet 6 Jul 2023
CVE-2022-48517 CVE record

Unauthorized service access vulnerability in the DSoftBus module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 6 Jul 2023
CVE-2022-48516 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48515 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 6 Jul 2023
CVE-2022-48514 CVE record

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48513 CVE record

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 6 Jul 2023
CVE-2021-46892 CVE record

Encryption bypass vulnerability in Maintenance mode.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 6 Jul 2023
CVE-2022-48511 CVE record

Type confusion in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2022-48510 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48509 CVE record

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2022-48507 CVE record

Authentication bypass by replay in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 6 Jul 2023
CVE-2023-34164 CVE record

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2023-3456 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Jul 2023
CVE-2023-37245 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2023-37242 CVE record

Insecure direct object reference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Jul 2023
CVE-2023-37241 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Jul 2023
CVE-2023-37240 CVE record

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2023-37239 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2023-37238 CVE record

Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-275
Not analysed yet 6 Jul 2023
CVE-2021-46894 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 6 Jul 2023
CVE-2022-48512 CVE record

Heap-based buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2022-48508 CVE record

Inappropriate authorization vulnerability in the system apps.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 6 Jul 2023
CVE-2023-3455 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 5 Jul 2023
CVE-2021-46893 CVE record

Vulnerability of unstrict data verification and parameter check.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1284
Not analysed yet 5 Jul 2023
CVE-2021-46891 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 5 Jul 2023
CVE-2021-46890 CVE record

Vulnerability of incomplete read and write permission verification in the GPU module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 5 Jul 2023
CVE-2023-34167 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34166 CVE record

CVSS 7.5 High

Resource allocation without limits in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 19 Jun 2023
CVE-2023-34163 CVE record

CVSS 7.5 High

Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2023-34162 CVE record

CVSS 7.5 High

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2023-34161 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 19 Jun 2023
CVE-2023-34160 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34159 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2023-34158 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34156 CVE record

Session fixation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34155 CVE record

Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48496 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2022-48495 CVE record

Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48494 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2022-48491 CVE record

Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48488 CVE record

CVSS 5.3 Medium

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 19 Jun 2023
CVE-2023-34157 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Authentication bypass by spoofing in Huawei HarmonyOS
- Huawei HarmonyOS
- Authentication bypass
Not analysed yet 16 Jun 2023
CVE-2023-34165 CVE record

Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access wi…
- Huawei HarmonyOS
Not analysed yet 16 Jun 2023
CVE-2023-34154 CVE record

Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system…
- Huawei HarmonyOS
Not analysed yet 16 Jun 2023
CVE-2023-31227 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 26 May 2023
CVE-2023-31226 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 26 May 2023
CVE-2023-31225 CVE record

CVSS 3.3 Low

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 26 May 2023
CVE-2023-0117 CVE record

CVSS 5.3 Medium

The online authentication provided by the hwKitAssistant lacks strict identity verification of applications.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 26 May 2023
CVE-2023-0116 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 26 May 2023
CVE-2022-48479 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 26 May 2023
CVE-2022-48478 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

The facial recognition TA of some products lacks memory length verification.
- Huawei HarmonyOS
Not analysed yet 26 May 2023
CVE-2021-46886 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023