7401 matches found
CVE-2021-22464
CVE-2021-22464 affects HarmonyOS with an out-of-bounds read in a component that handles untrusted input. Local attackers can trigger a soft/system restart. Connected sources corroborate the vulnerability description across multiple databases (e.g., Red Hat, CNVD, CVE listings). The documents do n...
CVE-2021-22461
A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash...
CVE-2021-22453
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash...
CVE-2021-22467
The CVE-2021-22467 entry concerns HarmonyOS, describing an improper input validation vulnerability in a system component. This flaw can permit a local attacker to read arbitrary memory addresses, indicating a confidentiality impact without integrity/availability compromise. The root cause, as sta...
CVE-2021-22454
CVE-2021-22454 affects Huawei/HarmonyOS components. The vulnerability is described as External Control of System or Configuration Setting, allowing local attackers to trigger a core dump. Multiple sources (NVD, Red Hat advisory, CNVD, CVE records) consistently report the issue, with local access ...
CVE-2021-22454
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump...
CVE-2021-22469
A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read...
CVE-2021-22466
A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash...
CVE-2021-22466
HarmonyOS Affected Component: NPU sector; vulnerability is a Use-After-Free in the HarmonyOS NPU component leading to a local kernel crash. Root cause per sources is UAF; impact is partial availability disruption of kernel. No public details on specific vulnerable versions or patches are provided...
CVE-2021-22463
CVE-2021-22463 concerns a Use After Free vulnerability in a HarmonyOS component that may allow a local attacker to cause a kernel information disclosure. The available connected records confirm: affected product line is HarmonyOS; vulnerability type is Use After Free; impact is kernel information...
CVE-2021-22462
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash...
CVE-2021-22462
CVE-2021-22462 relates to Huawei/ HarmonyOS: a NULL pointer dereference in a HarmonyOS component allows a local attacker to crash the kernel. Documents consistently describe local exploitation with low attack complexity and imply a local, kernel-impacting flaw; CVSS data show low overall base sco...
CVE-2021-22455
HarmonyOS CVE-2021-22455 is described in connected sources as an integer overflow/vulnerability in HarmonyOS prior to version 2.0. The issue can allow a local attacker to cause memory-related problems (memory not released). The exact affected subcomponent and a fixed version are not provided in t...
CVE-2021-22452
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address...
CVE-2021-22465
A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...
CVE-2021-22470
A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain...
CVE-2021-22460
HarmonyOS vulnerability CVE-2021-22460 involves insufficient verification of data authenticity in a HarmonyOS component. The issue enables a local attacker to bypass control mechanisms. Affected versions are HarmonyOS prior to 2.0 (per connected Red Hat/CNVD/CNNVD entries). The exact vulnerable c...
CVE-2021-22459
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable...
CVE-2021-22457
CVE-2021-22457 concerns a HarmonyOS component with an improper input validation vulnerability. Local attackers may exploit this to cause an out-of-bounds write. Documents consistently describe the issue as a local, input-validation error leading to memory/write violations, with no public exploit ...