Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-44104 CVE record

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Oct 2023
CVE-2023-44103 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 11 Oct 2023
CVE-2023-44102 CVE record

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Oct 2023
CVE-2023-44101 CVE record

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.
- Huawei HarmonyOS
Not analysed yet 11 Oct 2023
CVE-2023-44100 CVE record

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Oct 2023
CVE-2023-44097 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 11 Oct 2023
CVE-2023-44095 CVE record

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 11 Oct 2023
CVE-2023-44094 CVE record

Type confusion in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 11 Oct 2023
CVE-2023-44109 CVE record

Injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Other injection
Not analysed yet 11 Oct 2023
CVE-2023-44096 CVE record

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 11 Oct 2023
CVE-2023-44093 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 11 Oct 2023
CVE-2022-48606 CVE record

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 Sept 2023
CVE-2023-4565 CVE record

CVSS 5.3 Medium

Incorrect permission assignment in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 26 Sept 2023
CVE-2023-41312 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 26 Sept 2023
CVE-2023-41311 CVE record

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 26 Sept 2023
CVE-2023-41310 CVE record

Keep-alive vulnerability in the sticky broadcast mechanism.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 26 Sept 2023
CVE-2023-41309 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 26 Sept 2023
CVE-2023-41308 CVE record

Sensitive information in log files in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 26 Sept 2023
CVE-2023-41307 CVE record

Memory overwriting vulnerability in the security module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 26 Sept 2023
CVE-2023-41306 CVE record

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 26 Sept 2023
CVE-2023-41305 CVE record

Weak encryption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Weak cryptography or TLS
Not analysed yet 26 Sept 2023
CVE-2023-41303 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 25 Sept 2023
CVE-2022-48605 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 25 Sept 2023
CVE-2023-41293 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
- CWE-227
Not analysed yet 25 Sept 2023
CVE-2023-41302 CVE record

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 25 Sept 2023
CVE-2023-41301 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 25 Sept 2023
CVE-2023-41300 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 25 Sept 2023
CVE-2023-41299 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 25 Sept 2023
CVE-2023-41298 CVE record

Vulnerability of permission control in the window module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 25 Sept 2023
CVE-2023-41297 CVE record

Vulnerability of defects introduced in the design process in the HiviewTunner module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 25 Sept 2023
CVE-2023-41296 CVE record

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 25 Sept 2023
CVE-2023-41295 CVE record

Vulnerability of improper permission management in the displayengine module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 25 Sept 2023
CVE-2023-41294 CVE record

Uncontrolled resource consumption in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
Not analysed yet 25 Sept 2023
CVE-2023-39409 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 25 Sept 2023
CVE-2023-39408 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 25 Sept 2023
CVE-2023-39407 CVE record

Path traversal in Huawei HarmonyOS
- Huawei HarmonyOS
- Path traversal
Not analysed yet 25 Sept 2023
CVE-2021-46895 CVE record

Vulnerability of defects introduced in the design process in the Multi-Device Task Center.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 13 Aug 2023
CVE-2023-39406 CVE record

Permission control vulnerability in the XLayout component.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39404 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 13 Aug 2023
CVE-2023-39403 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-358
Not analysed yet 13 Aug 2023
CVE-2023-39402 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
- Broken access control
Not analysed yet 13 Aug 2023
CVE-2023-39401 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
- Broken access control
Not analysed yet 13 Aug 2023
CVE-2023-39400 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
- Broken access control
Not analysed yet 13 Aug 2023
CVE-2023-39399 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-275
Not analysed yet 13 Aug 2023
CVE-2023-39398 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-275
Not analysed yet 13 Aug 2023
CVE-2023-39397 CVE record

CVSS 7.5 High

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 13 Aug 2023
CVE-2023-39395 CVE record

CVSS 7.5 High

Mismatch vulnerability in the serialization process in the communication system.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-19
Not analysed yet 13 Aug 2023
CVE-2023-39394 CVE record

Vulnerability of API privilege escalation in the wifienhance module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39391 CVE record

Vulnerability of system file information leakage in the USB Service module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39390 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39387 CVE record

Vulnerability of permission control in the window management module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39386 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39385 CVE record

Vulnerability of configuration defects in the media module of certain products..
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 13 Aug 2023
CVE-2023-39384 CVE record

Vulnerability of incomplete permission verification in the input method module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39383 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 13 Aug 2023
CVE-2023-39382 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39381 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39380 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39405 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 13 Aug 2023
CVE-2023-39396 CVE record

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 13 Aug 2023