CVE-2021-22468

A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage...

CVE-2021-22466

HarmonyOS Affected Component: NPU sector; vulnerability is a Use-After-Free in the HarmonyOS NPU component leading to a local kernel crash. Root cause per sources is UAF; impact is partial availability disruption of kernel. No public details on specific vulnerable versions or patches are provided...

CVE-2021-22466

A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash...

CVE-2021-22463

A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure...

CVE-2021-22463

CVE-2021-22463 concerns a Use After Free vulnerability in a HarmonyOS component that may allow a local attacker to cause a kernel information disclosure. The available connected records confirm: affected product line is HarmonyOS; vulnerability type is Use After Free; impact is kernel information...

CVE-2021-22462

CVE-2021-22462 relates to Huawei/ HarmonyOS: a NULL pointer dereference in a HarmonyOS component allows a local attacker to crash the kernel. Documents consistently describe local exploitation with low attack complexity and imply a local, kernel-impacting flaw; CVSS data show low overall base sco...

CVE-2021-22462

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash...

CVE-2021-22455

A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is not released...

CVE-2021-22455

HarmonyOS CVE-2021-22455 is described in connected sources as an integer overflow/vulnerability in HarmonyOS prior to version 2.0. The issue can allow a local attacker to cause memory-related problems (memory not released). The exact affected subcomponent and a fixed version are not provided in t...

CVE-2021-22452

CVE-2021-22452 affects HarmonyOS, specifically the bl2_iomcu_resource_cfg function. The connected sources describe an improper input validation vulnerability that enables a local attacker to read arbitrary memory addresses. The impact is documented as read access to any address; no remote code ex...

CVE-2021-22452

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address...

CVE-2021-22465

The CVE-2021-22465 entry relates to a heap-based buffer overflow in a HarmonyOS component. Impact described as local attackers potentially causing kernel system unavailability. Connected sources (including Red Hat and CNVD variants) consistently identify the same issue without additional technica...

CVE-2021-22465

A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

CVE-2021-22456

Technical details about CVE-2021-22456 are not publicly provided in the supplied documents. Monitor for updates from HarmonyOS/Huawei advisories and related CVE pages.

CVE-2021-22456

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

CVE-2021-22450

A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to cause memory exhaustion...

CVE-2021-22450

CVE-2021-22450 affects HarmonyOS: a component suffers from an Incomplete Cleanup vulnerability that can allow a local attacker to cause memory exhaustion. The issue is described across multiple sources (e.g., NVD/NVD list and Red Hat/CNVD variants) as a memory-leak style fault with local access r...

CVE-2021-22470

A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain...

CVE-2021-22470

CVE-2021-22470 relates to HarmonyOS and is described across multiple connected sources as a Privileges Controls vulnerability in a HarmonyOS component that allows a local attacker to expand the Recording Trusted Domain. The Red Hat and CNVD entries reiterate a local-privilege issue stemming from ...

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...