Harmonyos Security Vulnerabilities and Issues — Page 2 of Harmonyos CVE List

Lucene search

HuaweiHarmonyos

198 matches found

CVE•added 2023/08/13 1:15 p.m.•47 views

CVE-2023-39399

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

9.1CVSS9AI score0.00066EPSS

CVE•added 2023/09/25 12:15 p.m.•47 views

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.

9.8CVSS9.2AI score0.00193EPSS

CVE•added 2023/10/11 1:15 p.m.•47 views

CVE-2023-44119

Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.

7.5CVSS7.3AI score0.00056EPSS

CVE•added 2023/11/08 11:15 a.m.•47 views

CVE-2023-46757

The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.4AI score0.0015EPSS

CVE•added 2023/01/06 8:15 p.m.•46 views

CVE-2021-46867

The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.

7.5CVSS7.5AI score0.00094EPSS

CVE•added 2023/01/06 8:15 p.m.•46 views

CVE-2022-47974

The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart.

6.5CVSS6.4AI score0.00034EPSS

CVE•added 2023/01/06 8:15 p.m.•46 views

CVE-2022-47976

The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.

7.5CVSS7.5AI score0.00072EPSS

CVE•added 2023/03/27 10:15 p.m.•46 views

CVE-2022-48350

The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.0008EPSS

CVE•added 2023/03/27 10:15 p.m.•46 views

CVE-2022-48351

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.

7.5CVSS7.5AI score0.00098EPSS

CVE•added 2023/03/27 10:15 p.m.•46 views

CVE-2022-48352

Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.

7.5CVSS7.5AI score0.00098EPSS

CVE•added 2023/03/27 10:15 p.m.•46 views

CVE-2022-48358

The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions.

7.4CVSS7.4AI score0.00058EPSS

CVE•added 2023/03/27 10:15 p.m.•46 views

CVE-2023-26548

The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability.

7.5CVSS7.5AI score0.00112EPSS

CVE•added 2023/10/11 1:15 p.m.•46 views

CVE-2023-44114

Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00081EPSS

CVE•added 2023/11/08 11:15 a.m.•46 views

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.

5.3CVSS5.2AI score0.00086EPSS

CVE•added 2023/11/08 10:15 a.m.•46 views

CVE-2023-46761

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/01/06 8:15 p.m.•45 views

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.

7.5CVSS7.5AI score0.00054EPSS

CVE•added 2023/02/09 5:15 p.m.•45 views

CVE-2022-48302

The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.00069EPSS

CVE•added 2023/03/27 10:15 p.m.•45 views

CVE-2022-48348

The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity.

9.1CVSS9AI score0.00095EPSS

CVE•added 2023/03/27 10:15 p.m.•45 views

CVE-2022-48355

The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.

6.5CVSS6.3AI score0.00037EPSS

CVE•added 2023/08/13 1:15 p.m.•45 views

CVE-2023-39391

Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.3AI score0.00081EPSS

CVE•added 2023/09/25 1:15 p.m.•45 views

CVE-2023-41300

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/10/11 12:15 p.m.•45 views

CVE-2023-44095

Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.

7.5CVSS7.5AI score0.00072EPSS

CVE•added 2023/11/08 10:15 a.m.•45 views

CVE-2023-46755

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart.

5.3CVSS5.1AI score0.00058EPSS

CVE•added 2023/11/08 11:15 a.m.•45 views

CVE-2023-46758

Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.

7.5CVSS7.5AI score0.00114EPSS

CVE•added 2023/02/09 5:15 p.m.•44 views

CVE-2022-48289

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.6AI score0.0007EPSS

CVE•added 2023/08/13 12:15 p.m.•44 views

CVE-2023-39383

Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security.

7.5CVSS7.4AI score0.00059EPSS

CVE•added 2023/08/13 12:15 p.m.•44 views

CVE-2023-39392

Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

7.5CVSS7.4AI score0.00027EPSS

CVE•added 2023/08/13 1:15 p.m.•44 views

CVE-2023-39401

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

9.1CVSS9.1AI score0.00102EPSS

CVE•added 2023/10/11 11:15 a.m.•44 views

CVE-2023-44094

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

5.3CVSS5.2AI score0.00032EPSS

CVE•added 2023/11/08 10:15 a.m.•44 views

CVE-2023-46767

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00175EPSS

CVE•added 2023/02/09 5:15 p.m.•43 views

CVE-2022-48288

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.6AI score0.0007EPSS

CVE•added 2023/02/09 5:15 p.m.•43 views

CVE-2022-48290

The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity.

9.1CVSS9.1AI score0.00057EPSS

CVE•added 2023/02/09 5:15 p.m.•43 views

CVE-2022-48293

The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

6.5CVSS6.5AI score0.00035EPSS

CVE•added 2023/02/09 5:15 p.m.•43 views

CVE-2022-48294

The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.0007EPSS

CVE•added 2023/03/27 10:15 p.m.•43 views

CVE-2022-48346

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.00085EPSS

CVE•added 2023/03/27 10:15 p.m.•43 views

CVE-2022-48360

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.0008EPSS

CVE•added 2023/06/19 5:15 p.m.•43 views

CVE-2023-34155

Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability.

7.5CVSS7.5AI score0.00087EPSS

CVE•added 2023/09/25 11:15 a.m.•43 views

CVE-2023-39409

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 9:15 a.m.•43 views

CVE-2023-44098

Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.4AI score0.0007EPSS

CVE•added 2023/11/08 9:15 a.m.•43 views

CVE-2023-46771

Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.0015EPSS

CVE•added 2023/01/06 8:15 p.m.•42 views

CVE-2021-46868

The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.

7.5CVSS7.5AI score0.00094EPSS

CVE•added 2023/05/26 5:15 p.m.•42 views

CVE-2022-48478

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service.

9.8CVSS9.3AI score0.00125EPSS

CVE•added 2023/03/27 10:15 p.m.•42 views

CVE-2023-26549

The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.00094EPSS

CVE•added 2023/08/13 12:15 p.m.•42 views

CVE-2023-39382

Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.

7.5CVSS7.4AI score0.00072EPSS

CVE•added 2023/08/13 1:15 p.m.•42 views

CVE-2023-39395

Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

7.5CVSS7.5AI score0.00108EPSS

CVE•added 2023/09/25 9:15 a.m.•42 views

CVE-2023-39407

The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.

9.1CVSS9AI score0.00152EPSS

CVE•added 2023/10/11 12:15 p.m.•42 views

CVE-2023-44101

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.00071EPSS

CVE•added 2023/10/11 1:15 p.m.•42 views

CVE-2023-44105

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.

9.8CVSS9.3AI score0.00074EPSS

CVE•added 2023/11/08 10:15 a.m.•42 views

CVE-2023-46763

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously.

5.3CVSS5.2AI score0.00107EPSS

CVE•added 2023/02/09 5:15 p.m.•41 views

CVE-2022-48286

The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.7AI score0.0007EPSS

Total number of security vulnerabilities198