Harmonyos Security Vulnerabilities and Issues — Harmonyos CVE List

Lucene search

HuaweiHarmonyos

866 matches found

CVE•added 2024/02/18 4:15 a.m.•7042 views

CVE-2023-52369

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.

9.1CVSS7AI score0.0008EPSS

CVE•added 2024/02/18 3:15 a.m.•7037 views

CVE-2023-52363

Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.

6.3CVSS6.6AI score0.00038EPSS

CVE•added 2024/02/18 3:15 a.m.•7006 views

CVE-2023-52365

Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

7.7CVSS6.6AI score0.00028EPSS

CVE•added 2024/02/18 3:15 a.m.•7004 views

CVE-2023-52387

Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.0011EPSS

CVE•added 2024/02/18 6:15 a.m.•6977 views

CVE-2023-52375

Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.8AI score0.00039EPSS

CVE•added 2024/02/18 4:15 a.m.•6973 views

CVE-2023-52373

Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.

7.5CVSS6.7AI score0.0008EPSS

CVE•added 2024/02/18 4:15 a.m.•6907 views

CVE-2023-52371

Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.

3.5CVSS6.7AI score0.00019EPSS

CVE•added 2024/02/18 6:15 a.m.•6652 views

CVE-2023-52377

Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.

7.4CVSS6.7AI score0.00119EPSS

CVE•added 2024/02/18 4:15 a.m.•6561 views

CVE-2023-52374

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.00105EPSS

CVE•added 2024/02/18 3:15 a.m.•6476 views

CVE-2023-52358

Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.

6.2CVSS6.7AI score0.00022EPSS

CVE•added 2024/02/18 3:15 a.m.•6358 views

CVE-2023-52097

Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.7AI score0.00065EPSS

CVE•added 2024/02/18 7:15 a.m.•6243 views

CVE-2023-52381

Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

9.8CVSS7.1AI score0.00195EPSS

CVE•added 2024/02/18 7:15 a.m.•6129 views

CVE-2023-52380

Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.

4.3CVSS6.7AI score0.00117EPSS

CVE•added 2024/02/18 7:15 a.m.•6118 views

CVE-2023-52378

Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.

9.8CVSS6.7AI score0.00158EPSS

CVE•added 2024/02/18 3:15 a.m.•6109 views

CVE-2023-52361

The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.

7.5CVSS7AI score0.0006EPSS

CVE•added 2024/02/18 4:15 a.m.•5808 views

CVE-2023-52368

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.

5.3CVSS6.7AI score0.00067EPSS

CVE•added 2024/02/18 3:15 a.m.•4605 views

CVE-2023-52362

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.8AI score0.00072EPSS

CVE•added 2024/02/18 4:15 a.m.•4604 views

CVE-2023-52372

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.7AI score0.00084EPSS

CVE•added 2024/02/18 6:15 a.m.•4428 views

CVE-2023-52376

Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.7AI score0.0011EPSS

CVE•added 2024/02/18 4:15 a.m.•4416 views

CVE-2023-52366

Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

7.5CVSS6.6AI score0.00084EPSS

CVE•added 2024/02/18 3:15 a.m.•3932 views

CVE-2023-52360

Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.

7.5CVSS6.9AI score0.00057EPSS

CVE•added 2024/02/18 4:15 a.m.•3931 views

CVE-2023-52370

Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.

9.8CVSS7AI score0.00113EPSS

CVE•added 2023/09/25 1:15 p.m.•2496 views

CVE-2023-41301

Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally.

7.5CVSS7.4AI score0.00114EPSS

CVE•added 2023/08/13 1:15 p.m.•2493 views

CVE-2023-39394

Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified.

7.5CVSS7.6AI score0.00059EPSS

CVE•added 2023/08/13 1:15 p.m.•2489 views

CVE-2023-39390

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

7.5CVSS7.3AI score0.00072EPSS

CVE•added 2023/08/13 1:15 p.m.•2483 views

CVE-2023-39404

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

7.5CVSS7.3AI score0.00072EPSS

CVE•added 2023/07/06 1:15 p.m.•2478 views

CVE-2023-37238

Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projection features.

5.3CVSS5.1AI score0.00057EPSS

CVE•added 2023/07/06 1:15 p.m.•2468 views

CVE-2023-37241

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.

7.5CVSS7.4AI score0.00072EPSS

CVE•added 2024/02/18 4:15 a.m.•2379 views

CVE-2023-52367

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

7.7CVSS6.7AI score0.0002EPSS

CVE•added 2022/06/13 4:15 p.m.•485 views

CVE-2022-31757

The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.00131EPSS

CVE•added 2023/04/16 7:15 a.m.•223 views

CVE-2022-48312

The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity.

9.1CVSS9.1AI score0.00082EPSS

CVE•added 2022/04/11 8:15 p.m.•127 views

CVE-2022-22253

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

7.5CVSS7.5AI score0.00066EPSS

CVE•added 2022/04/11 8:15 p.m.•102 views

CVE-2022-22256

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

7.5CVSS7.5AI score0.00162EPSS

CVE•added 2022/02/25 7:15 p.m.•92 views

CVE-2021-22434

There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

9.8CVSS9.3AI score0.00247EPSS

CVE•added 2024/02/18 7:15 a.m.•92 views

CVE-2023-52379

Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.0008EPSS

CVE•added 2022/02/25 7:15 p.m.•89 views

CVE-2021-22432

There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

10CVSS9.3AI score0.0018EPSS

CVE•added 2022/03/10 5:43 p.m.•87 views

CVE-2021-40047

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

7.8CVSS7.5AI score0.00095EPSS

CVE•added 2022/02/09 11:15 p.m.•86 views

CVE-2021-40045

There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.

5.5CVSS5.5AI score0.00053EPSS

CVE•added 2024/02/18 3:15 a.m.•85 views

CVE-2023-52357

Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.7AI score0.00089EPSS

CVE•added 2022/03/10 5:43 p.m.•82 views

CVE-2021-40052

There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.

7.8CVSS7.6AI score0.00276EPSS

CVE•added 2022/05/13 3:15 p.m.•82 views

CVE-2022-22261

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.

7.5CVSS7.5AI score0.00191EPSS

CVE•added 2022/03/10 5:43 p.m.•81 views

CVE-2021-40055

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.

7.1CVSS5.6AI score0.00095EPSS

CVE•added 2022/02/25 7:15 p.m.•80 views

CVE-2021-22431

There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

9.8CVSS9.3AI score0.00247EPSS

CVE•added 2022/02/25 7:15 p.m.•79 views

CVE-2021-22394

There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaboration.

9.1CVSS9.3AI score0.00267EPSS

CVE•added 2022/02/25 7:15 p.m.•79 views

CVE-2021-22395

There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.6AI score0.00284EPSS

CVE•added 2022/03/10 5:43 p.m.•79 views

CVE-2021-40053

There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.

9.1CVSS9.1AI score0.00256EPSS

CVE•added 2022/05/13 3:15 p.m.•78 views

CVE-2022-22260

The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.

9.1CVSS9AI score0.00191EPSS

CVE•added 2022/02/25 7:15 p.m.•77 views

CVE-2021-22433

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

9.8CVSS9.3AI score0.00247EPSS

CVE•added 2022/03/10 5:43 p.m.•77 views

CVE-2021-40061

There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

7.5CVSS7.5AI score0.00098EPSS

CVE•added 2022/02/25 7:15 p.m.•76 views

CVE-2021-22479

The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.

5.5CVSS5.3AI score0.00021EPSS

Total number of security vulnerabilities866