ReArk

ReArk English | 简体中文 ReArk is a desktop reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT, Android, and iOS applications. Open HarmonyOS .hap, .app, and .abc files, Android .apk and .aab packages, or iOS .ipa files to inspect code, resources, metadata, signatures, and applicati...

Huawei HarmonyOS input validation error vulnerability

Huawei HarmonyOS version 7.0.0 contains an input validation error vulnerability. This vulnerability stems from a denial-of-service issue in the file parsing module; successful exploitation may affect system availability...

CVE-2026-101185: Huawei HarmonyOS: OOB read vulnerability in the peripheral module

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS information disclosure vulnerability

Vulnerabilities related to information disclosure exist in Huawei HarmonyOS versions 4.3.3, 4.3.1, 4.3.0, 4.2.0, and 4.0.0, as well as EMUI versions 16.0.0, 15.0.0, 14.2.0, and 14.0.0. These vulnerabilities stem from improper permission control within the auto-fill service module, potentially...

CVE-2026-101172: Huawei HarmonyOS: Permission control vulnerability in the graphics module

Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality...

CVE-2026-101179: Huawei HarmonyOS: Buffer overflow vulnerability in the file preview module

Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101174: Huawei HarmonyOS: DoS vulnerability in the DSoftBus module

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101186: Huawei HarmonyOS: DoS vulnerability in the window module

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101181: Huawei HarmonyOS: Permission control vulnerability in the WLAN module

Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101183: Huawei HarmonyOS: UAF vulnerability in the location service module

UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101173: Huawei HarmonyOS: DoS vulnerability in the DSoftBus module

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101170: Huawei HarmonyOS: DoS vulnerability in the file parsing module

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101180: Huawei HarmonyOS: DoS vulnerability in the file parsing module

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101182: Huawei HarmonyOS: Race condition vulnerability in the location service module

Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-101171: Huawei HarmonyOS: Permission control vulnerability in the background task management module

Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-101175: Huawei HarmonyOS: Null pointer dereference vulnerability in the ArkWeb module

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-90860

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...

EUVD-2026-83843

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...

CVE-2026-90860

Canva Mobile App for HarmonyOS prior to v1.15.1 failed to restrict HTTP headers returned to an external origin running in a privileged WebView . The underlying cause is an insufficient origin check on WebView responses, allowing a threat actor with control of the WebView to read a user's session ...

CVE-2026-90860

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...