CVE-2021-40045

CVE-2021-40045 concerns Huawei HarmonyOS (Wearables recovery upgrade system) where the signature verification mechanism can fail during system upgrade in recovery mode. The underlying vulnerability is a signature verification failure that can affect confidentiality of service. The NVD entry notes...

CVE-2021-39968

Technical details about CVE-2021-39968 are not publicly available in the provided documents. Monitor for updates from vendors and security databases.

CVE-2021-22479

The CVE concerns HarmonyOS: an invalid address access vulnerability in a HarmonyOS module interface. Root cause: improper handling of addresses within the module interface leads to invalid memory access. Impact: exploitation may crash the kernel (availability impact high as per CVE details). Affe...

CVE-2021-40015

CVE-2021-40015 concerns a race condition in the binder driver subsystem of the kernel, with Huawei HarmonyOS Wearables kernel references appearing in connected sources. The vulnerability is described as potentially affecting kernel stability upon successful exploitation. Connected documents confi...

CVE-2021-22441

CVE-2021-22441 relates to Huawei HarmonyOS and is described as an integer overflow that may lead to a kernel crash. Multiple connected sources (NVD, Red Hat, CVE lists, CNNVD) corroborate the issue as a local vulnerability affecting HarmonyOS components, with exploitation potentially causing a ke...

CVE-2021-22480

The CVE-2021-22480 entry describes an integer overflow in the interface of a HarmonyOS module, with exploitation potentially causing heap memory overflow. Public sources (NVD/Red Hat/CVE list) reiterate the same description. The available documents do not provide explicit patch/version remediatio...

CVE-2021-22478

CVE-2021-22478 concerns a vulnerability in the HarmonyOS interface of a module that enables use-after-free (UAF) conditions. The issue may allow information leakage (confidentiality impact) and is described with a Local, Low-Privilege, Low-Complexity attack vector (no user interaction) and High C...

CVE-2023-1693

CVE-2023-1693 describes a file privilege escalation in the Settings module with potential confidentiality impact. Affected component: Settings module (reported across multiple sources linked to HarmonyOS/Huawei and related advisories). Root cause: improper permission handling enabling escalation ...

CVE-2021-40036

CVE-2021-40036 relates to Huawei/HarmonyOS, specifically the bone voice ID TA component, where a memory overwrite vulnerability can allow malicious code execution. Multiple connected sources (NVD, RH, CNVD/CNNVD, CNVD, CVE listings) consistently describe a memory overwrite flaw in the bone voice ...

CVE-2021-39996

CVE-2021-39996 affects Huawei HarmonyOS Wearables’ NFC module, showing a heap-based buffer overflow in the NFC stack. Multiple connected sources describe a memory out-of-bounds condition that an attacker could exploit. The available documents do not provide specific firmware versions, root cause ...

CVE-2022-46324

CVE-2022-46324 is associated with an out-of-bounds write vulnerability affecting Huawei HarmonyOS in the connected documents. The reports describe memory out-of-bounds writes that can lead to system service exceptions. No explicit affected versions, root-cause details beyond the out-of-bounds con...

CVE-2022-46327

The CVE-2022-46327 entry concerns Huawei HarmonyOS devices with a configuration issue that can allow privilege escalation and cause system service exceptions. Reports across multiple sources (NVD, RH Red Hat, CNNVD, and related enrichments) describe a vulnerability where exploitation leads to hig...

CVE-2022-46315

Technical details about CVE-2022-46315 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or fixes are detailed here. Monitor for updates from vendors and security bulletins.

CVE-2022-46313

The CVE-2022-46313 entry concerns Huawei HarmonyOS sensor privacy module. It is described as an authentication vulnerability that, if exploited, could render the device camera and microphone unavailable. The available metrics indicate a CVSS v3.1 base score of 5.3 (Medium) with network attack vec...

CVE-2022-46317

CVE-2022-46317 involves an out-of-bounds read in the power consumption module, affecting HarmonyOS’ power consumption component. The vulnerability may impact system availability if exploited. Documents consistently describe an out-of-bounds read issue and do not provide concrete exploitation deta...

CVE-2021-37110

Technical details for CVE-2021-37110 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2022-41596

CVE-2022-41596 affects Huawei HarmonyOS (System Tools) with a serialization/deserialization inconsistency in the System Tools class. The vulnerability enables unauthorized startup of components due to improper handling of serialized data, as described across multiple sources. Public details in th...

CVE-2022-46319

CVE-2022-46319 describes a boundary-check failure in fingerprint calibration that can lead to an out-of-bounds write in Huawei HarmonyOS. The core issue is a lack of boundary judgment in the fingerprint calibration path. The CVSS vector indicates a critical impact (C:H/I:H/A:H) with network vecto...

CVE-2021-40018

CVE-2021-40018 corresponds to a neutrality-focused vulnerability in Huawei HarmonyOS’s eID component, described as a null pointer reference. The issue arises when the eID path dereferences a released pointer, potentially exposing data confidentiality. Documented sources (NVD and CNVD family) iden...

CVE-2021-46867

CVE-2021-46867 describes a memory release problem in HW_KEYMASTER leading to potential out-of-bounds memory access. Publicly cited docs identify Huawei EMUI/Magic UI devices affected (HW_KEYMASTER memory handling), with no explicit patch/version fix details available in the provided sources. The ...

CVE-2022-46310

CVE-2022-46310 affects Huawei HarmonyOS TelephonyProvider module. The vulnerability is in the TelephonyProvider’s value retrieval logic, which could lead to data confidentiality leakage if exploited. CVSSv3.1 base score 7.5 ( HIGH ) with NETWORK attack vector and LOW attack complexity, no privile...

CVE-2022-46321

CVE-2022-46321 affects Huawei/HarmonyOS Wi‑Fi modules where permission verification is flawed, enabling potential data confidentiality impact. The available connected records indicate a permission-check bug in the Wi‑Fi subsystem (root cause: incorrect permission checks) with CVSSv3.1 base score ...

CVE-2021-37128

Huawei HarmonyOS contains a Path Traversal vulnerability (CVE-2021-37128). Affected component allows an attacker to write arbitrary files via network-accessible paths due to insufficient input validation. Impact per sources: potential for writing files with system_app privileges, with high/critic...

CVE-2022-46311

The CVE-2022-46311 entry concerns Huawei HarmonyOS with a vulnerability in the contacts component (free undefined provider) that can affect data integrity. Connected sources corroborate: the issue is tied to the contacts component, with no specified affected versions in PT-2022-27803, and public ...

CVE-2022-46326

CVE-2022-46326 concerns Huawei/HarmonyOS on smartphones. The vulnerability is a memory/out-of-bounds write in HarmonyOS components, with potential to cause system service exceptions. The CVSS v3.1 score is 9.8 (CRITICAL): attack vector network, attack complexity low, privileges required none, use...

CVE-2022-47976

The CVE-2022-47976 issue affects the DMSDP module of Huawei’s distributed hardware stack (Huawei EMUI/HarmonyOS). The vulnerability arises from an overriding control connection in DMSDP, which could allow imposter control connections and may lead to denial of service by disconnecting normal servi...

CVE-2021-39990

CVE-2021-39990 affects Huawei HarmonyOS’ lock screen component. The issue is a stack-based buffer overflow in the screen lock module, with exploitation potentially impacting user experience. The provided documents mention Huawei HarmonyOS in relation to this CVE and describe the vulnerability typ...

CVE-2021-39966

CVE-2021-39966 affects Huawei HarmonyOS (notably SensorhubMain component) where an uninitialized AOD driver structure is reported. The vulnerability is described as potentially compromising service confidentiality if exploited. Connected documents consistently reference HarmonyOS and the uninitia...

CVE-2021-39985

CVE-2021-39985 affects Huawei HarmonyOS HwNearbyMain module, with an improper validation of an array index. Exploitation may crash the affected process (availability impact: HIGH) per NVD and Red Hat/NVD synopses. Root cause stated as array index validation issue; no explicit exploit details or a...

CVE-2022-41599

CVE-2022-41599 affects Huawei HarmonyOS (system service). The vulnerability is a return-value flaw in a system service that may lead to confidentiality leakage if exploited. The NVD entry indicates a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileg...

CVE-2022-46312

CVE-2022-46312 concerns Huawei/HarmonyOS where the vulnerability is in the application management module ’s permission verification. The root cause is a flaw that allows improper permission checks, leading to an action that can cause an unexpected clearing of device applications . The CVSS indica...

CVE-2022-46761

CVE-2022-46761 concerns Huawei EMUI and HarmonyOS. Connected sources describe a vulnerability causing dynamic hiding/restoring of app icons, a security bypass that could enable malicious hiding of icons. The CVE notes a high severity (CVSS v3.1: 7.5, Network attack vector, Low complexity, No priv...

CVE-2022-47975

CVE-2022-47975 concerns a double free vulnerability in the DUBAI module. Reported impact is availability degradation with no confidentiality or integrity loss, exploitable over network without authentication and with low attack complexity. The issue is described across multiple sources as affecti...

CVE-2021-39987

Huawei HarmonyOS HwNearbyMain module has a Data Processing Errors vulnerability that may cause a process to restart. Affected product: HarmonyOS; vulnerable component: HwNearbyMain. Root cause described as Data Processing Errors. Impact stated as potential process restart (availability impact). N...

CVE-2022-46328

CVE-2022-46328 concerns Huawei HarmonyOS and is tied to an input validation vulnerability in the OS. The available documents describe that the vulnerability affects smartphones running HarmonyOS, where an attacker could exploit input validation weaknesses to compromise data confidentiality. The N...

CVE-2022-47974

CVE-2022-47974 describes a Denial of Service in the Bluetooth AVRCP module. Exploitation may cause the Bluetooth process to restart, impacting Huawei EMUI and HarmonyOS devices as cited in supplied documents. The root cause is tied to the AVRCP handling; no public patch/version details are provid...

CVE-2022-46323

Huawei HarmonyOS is affected by CVE-2022-46323, a memory out-of-bounds write vulnerability in the OS that can lead to system service exceptions. The CVSS v3.1 score is 9.8 (CRITICAL) with network attack vector, no user interaction, and high impacts on confidentiality, integrity, and availability....

CVE-2023-1694

CVE-2023-1694 affects the Settings module of Huawei/HarmonyOS, describing a file privilege escalation that can compromise confidentiality. The core issue is a privilege escalation in the Settings component; no exploit details or affected versions are provided in the connected documents. The CVSS ...

CVE-2021-37043

CVE-2021-37043 is a stack-based buffer overflow described for Huawei HarmonyOS smartphones. The vulnerability affects Huawei smartphones, where a malicious application could cause system resource exhaustion by exploiting the overflow. The available documents do not provide version-specific impact...

CVE-2021-39977

The Huawei HarmonyOS HwNearbyMain component contains a null pointer dereference vulnerability (CVE-2021-39977). Exploitation may restart the affected process. CVSSv3.1 indicates a network attack with no privileges required and high availability impact (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H); CVSSv2...

CVE-2022-46762

Technical details are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2021-39975

CVE-2021-39975 is described as a data processing error in Hilinksvc that can lead to denial of service. The NVD entry provides a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, UI/NONE, impact: Availability HIGH) and a CVSS v2 base score of 5.0 (PARTIAL availability)...

CVE-2021-46868

Summary: CVE-2021-46868 affects the HW_KEYMASTER module. The issue is a memory release problem that can lead to out-of-bounds memory access. The NVD entry indicates a high-severity impact (CVSSv3.1: 7.5, Network attack vector, Low attack complexity, no user interaction required) with confidential...

CVE-2022-46314

Technical details about CVE-2022-46314 are not publicly available in the provided documents. Available references reiterate a design flaw in the IPC module with potential availability impact; monitor for updates.

CVE-2022-46322

The CVE-2022-46322 entry corresponds to a memory out-of-bounds write vulnerability in Huawei HarmonyOS (and related smartphone implementations). The connected documents confirm the flaw affects HarmonyOS and describe that exploitation could cause system service exceptions. The core details provid...

CVE-2021-37097

CVE-2021-37097 describes a code injection vulnerability in Huawei’s HarmonyOS (Huawei smartphone). The root cause is a code injection flaw that can allow exploitation without user interaction, potentially causing a system restart. Publicly available documents do not specify affected versions or e...

CVE-2021-37098

Technical details about CVE-2021-37098 are not publicly available in the provided connected documents. Monitor for updates from vendors and advisories to obtain affected products, vulnerable components, and fixes.

CVE-2021-37133

CVE-2021-37133 is linked to Huawei HarmonyOS environments involving the HAL card component where unauthorized access could lead to confidentiality exposure. The connected CNVD/CNNVD entries describe an unauthorized access vulnerability affecting HarmonyOS HAL card components, indicating a confide...

CVE-2021-39989

CVE-2021-39989 affects Huawei HarmonyOS HwNearbyMain. Description: Exposure of Sensitive Information to an Unauthorized Actor, potentially causing a process restart. CVSS: v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW complexity, no privileges required, UI: none, scope unchanged, and...

CVE-2021-40014

Huawei HarmonyOS bone voice ID trusted application (TA) has a heap overflow vulnerability in the TA component, with potential data confidentiality impact. Affected: bone voice ID TA on HarmonyOS. Root cause: heap overflow; exploitation specifics and affected versions are not detailed in the provi...