Design/Logic Flaw

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos...

Design/Logic Flaw

A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing...

Privilege escalation

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to cause further Elevation of Privileges...

CVE-2021-22423

The CVE-2021-22423 entry concerns a vulnerability in a HarmonyOS component that allows an out-of-bounds write. The issue is described as enabling local attackers to trigger an integer overflow. Red Hat and CNVD entries corroborate the HarmonyOS focus and the local-exploit vector, but the connecte...

CVE-2021-22423

A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow...

CVE-2021-22420

A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing...

CVE-2021-22420

Technical details are not publicly available in the provided documents for CVE-2021-22420; monitor for updates.

CVE-2021-22418

Technical details about CVE-2021-22418 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2021-22418

A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting...

CVE-2021-22419

HarmonyOS contains an Insufficient Verification of Data Authenticity vulnerability (CVE-2021-22419) that could allow local attackers to cause a persistent denial of service. The issue is described across multiple sources as a HarmonyOS component flaw leading to DoS, with local access required and...

CVE-2021-22425

A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges...

CVE-2021-22425

CVE-2021-22425 describes a Double Free vulnerability in a HarmonyOS component that allows a local attacker to obtain Root Privileges . The connected documents confirm the issue is local and privileges can be elevated, but do not provide exploit details or concrete remediation versions. No explici...

CVE-2021-22416

CVE-2021-22416 affects HarmonyOS with a Data Processing Error that enables local attackers to achieve Kernel Code Execution. The vulnerability concerns a component of HarmonyOS and is described across multiple feeds (e.g., Red Hat and CNVD mirrors) as allowing local exploitation to run code in th...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

CVE-2021-22421

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to cause further Elevation of Privileges...

CVE-2021-22421

HarmonyOS contains an improper Privilege Management vulnerability in a component, enabling local attackers to achieve Elevation of Privileges. Affected: HarmonyOS platform; root cause per description: improper privilege management. Impact: local privilege escalation with complete confidentiality/...

CVE-2021-22424

A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service...

CVE-2021-22424

CVE-2021-22424 concerns HarmonyOS: a kernel memory leakage vulnerability that local attackers may exploit to cause a kernel denial of service. Affected software is HarmonyOS kernel space; root cause is memory leakage in the kernel, with impact limited to local access and kernel DoS. Remediation i...

CVE-2021-22417

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage...

CVE-2021-22417

CVE-2021-22417 affects HarmonyOS; a component suffers Data Processing Errors that can allow local attackers to cause kernel memory leakage. Documented impact includes LOCAL access with high availability impact, but concrete details on affected versions, exploitation specifics, and fixes are not p...