Harmonyos Security Vulnerabilities and Issues — Page 3 of Harmonyos CVE List

Lucene search

HuaweiHarmonyos

866 matches found

CVE•added 2022/06/13 3:15 p.m.•58 views

CVE-2022-31756

The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.

5.5CVSS5.5AI score0.00029EPSS

CVE•added 2022/06/13 3:15 p.m.•58 views

CVE-2022-31758

The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

4.7CVSS4.7AI score0.00019EPSS

CVE•added 2022/07/12 2:15 p.m.•58 views

CVE-2022-34736

The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

7.8CVSS7.3AI score0.0015EPSS

CVE•added 2024/04/08 9:15 a.m.•58 views

CVE-2023-52541

Authentication vulnerability in the API for app pre-loading.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.9AI score0.00051EPSS

CVE•added 2022/07/12 2:15 p.m.•57 views

CVE-2021-46741

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.

7.5CVSS7.5AI score0.00182EPSS

CVE•added 2022/05/13 3:15 p.m.•57 views

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.

7.5CVSS7.4AI score0.00191EPSS

CVE•added 2022/11/09 9:15 p.m.•57 views

CVE-2022-44547

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability.

7.5CVSS7.5AI score0.00072EPSS

CVE•added 2024/04/08 9:15 a.m.•57 views

CVE-2023-52551

Vulnerability of data verification errors in the kernel module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

5.3CVSS6.7AI score0.00016EPSS

CVE•added 2024/07/25 12:15 p.m.•57 views

CVE-2023-7271

Privilege escalation vulnerability in the NMS moduleImpact: Successful exploitation of this vulnerability will affect availability.

5.5CVSS7.4AI score0.00021EPSS

CVE•added 2025/04/07 4:15 a.m.•57 views

CVE-2025-31170

Access control vulnerability in the security verification moduleImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

9.1CVSS7.2AI score0.00018EPSS

CVE•added 2022/04/11 8:15 p.m.•56 views

CVE-2022-22254

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.00131EPSS

CVE•added 2022/05/13 3:15 p.m.•56 views

CVE-2022-29791

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.

7.5CVSS7.5AI score0.00191EPSS

CVE•added 2023/08/13 1:15 p.m.•56 views

CVE-2023-39397

Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.

7.5CVSS7.5AI score0.00126EPSS

CVE•added 2024/04/08 10:15 a.m.•56 views

CVE-2023-52364

Vulnerability of input parameters being not strictly verified in the RSMC module.Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.

6.3CVSS6.8AI score0.00043EPSS

CVE•added 2024/04/08 10:15 a.m.•56 views

CVE-2024-27897

Input verification vulnerability in the call module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.00059EPSS

CVE•added 2025/04/07 4:15 a.m.•56 views

CVE-2025-31173

Memory write permission bypass vulnerability in the kernel futex moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

8.8CVSS7.1AI score0.00008EPSS

CVE•added 2022/07/12 2:15 p.m.•55 views

CVE-2021-40012

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.4AI score0.00139EPSS

CVE•added 2022/06/13 4:15 p.m.•55 views

CVE-2021-46811

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.

5.3CVSS5.2AI score0.00082EPSS

CVE•added 2022/06/13 3:15 p.m.•55 views

CVE-2022-31763

The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.

5.5CVSS5.5AI score0.00019EPSS

CVE•added 2022/07/12 2:15 p.m.•55 views

CVE-2022-34742

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.00224EPSS

CVE•added 2022/08/10 8:16 p.m.•55 views

CVE-2022-37002

The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.

9.8CVSS9.4AI score0.00139EPSS

CVE•added 2022/08/10 8:16 p.m.•55 views

CVE-2022-37006

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.

7.5CVSS7.5AI score0.00082EPSS

CVE•added 2022/12/20 9:15 p.m.•55 views

CVE-2022-46317

The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.

7.5CVSS7.4AI score0.00069EPSS

CVE•added 2023/11/08 10:15 a.m.•55 views

CVE-2023-46762

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 10:15 a.m.•55 views

CVE-2023-46764

Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously.

5.3CVSS5.2AI score0.00079EPSS

CVE•added 2024/04/08 10:15 a.m.•55 views

CVE-2023-52386

Out-of-bounds write vulnerability in the RSMC module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00086EPSS

CVE•added 2024/04/08 9:15 a.m.•55 views

CVE-2023-52553

Race condition vulnerability in the Wi-Fi module.Impact: Successful exploitation of this vulnerability will affect availability.

7.4CVSS6.8AI score0.00057EPSS

CVE•added 2024/04/07 9:15 a.m.•55 views

CVE-2023-52716

Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00072EPSS

CVE•added 2022/06/13 3:15 p.m.•54 views

CVE-2022-31751

The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.

5.5CVSS5.4AI score0.00067EPSS

CVE•added 2022/09/16 6:15 p.m.•54 views

CVE-2022-39006

The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.

5.9CVSS5.6AI score0.00087EPSS

CVE•added 2022/12/20 9:15 p.m.•54 views

CVE-2022-46315

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.

7.5CVSS7.5AI score0.00113EPSS

CVE•added 2022/12/20 9:15 p.m.•54 views

CVE-2022-46324

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.

9.8CVSS9.4AI score0.001EPSS

CVE•added 2022/12/20 9:15 p.m.•54 views

CVE-2022-46326

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.

9.8CVSS9.4AI score0.00117EPSS

CVE•added 2023/04/16 8:15 a.m.•54 views

CVE-2022-48314

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

6.5CVSS6.4AI score0.00013EPSS

CVE•added 2023/03/27 10:15 p.m.•54 views

CVE-2022-48356

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition.

7.5CVSS7.5AI score0.00084EPSS

CVE•added 2023/08/13 1:15 p.m.•54 views

CVE-2023-39406

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.

7.5CVSS7.4AI score0.00072EPSS

CVE•added 2023/09/25 12:15 p.m.•54 views

CVE-2023-41299

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/10/11 1:15 p.m.•54 views

CVE-2023-44108

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

7.5CVSS7.4AI score0.00062EPSS

CVE•added 2024/04/08 9:15 a.m.•54 views

CVE-2023-52538

Vulnerability of package name verification being bypassed in the HwIms module.Impact: Successful exploitation of this vulnerability will affect availability.

9.1CVSS6.8AI score0.00014EPSS

CVE•added 2022/09/16 6:15 p.m.•53 views

CVE-2022-38999

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability.

9.8CVSS9.4AI score0.00162EPSS

CVE•added 2022/11/09 9:15 p.m.•53 views

CVE-2022-44548

There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

4.3CVSS4.6AI score0.00026EPSS

CVE•added 2022/11/09 9:15 p.m.•53 views

CVE-2022-44551

The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.

9.8CVSS9.3AI score0.00094EPSS

CVE•added 2022/12/20 9:15 p.m.•53 views

CVE-2022-46310

The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.00097EPSS

CVE•added 2022/12/20 9:15 p.m.•53 views

CVE-2022-46313

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone.

5.3CVSS5.5AI score0.00038EPSS

CVE•added 2023/03/27 10:15 p.m.•53 views

CVE-2022-48353

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions.

9.8CVSS9.2AI score0.001EPSS

CVE•added 2024/04/08 9:15 a.m.•53 views

CVE-2023-52545

Vulnerability of undefined permissions in the Calendar app.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00071EPSS

CVE•added 2024/06/14 8:15 a.m.•53 views

CVE-2024-36501

Memory management vulnerability in the boottime moduleImpact: Successful exploitation of this vulnerability can affect integrity.

5.6CVSS7.1AI score0.00047EPSS

CVE•added 2024/08/08 9:15 a.m.•53 views

CVE-2024-42031

Access permission verification vulnerability in the Settings module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.9AI score0.00097EPSS

CVE•added 2021/06/30 2:15 p.m.•52 views

CVE-2021-22326

A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this vulnerability to obtain Kernel space read/write capability.

7.1CVSS6.8AI score0.00068EPSS

CVE•added 2022/10/14 4:15 p.m.•52 views

CVE-2022-41583

The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.

7.5CVSS7.5AI score0.00072EPSS

Total number of security vulnerabilities866