Harmonyos@4.0.0 Security Vulnerabilities and Issues — Harmonyos@4.0.0 CVE List

Lucene search

HuaweiHarmonyos4.0.0

240 matches found

CVE•added 2024/02/18 4:15 a.m.•7042 views

CVE-2023-52369

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.

9.1CVSS7AI score0.0008EPSS

CVE•added 2024/02/18 3:15 a.m.•7037 views

CVE-2023-52363

Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.

6.3CVSS6.6AI score0.00038EPSS

CVE•added 2024/02/18 3:15 a.m.•7006 views

CVE-2023-52365

Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

7.7CVSS6.6AI score0.00028EPSS

CVE•added 2024/02/18 3:15 a.m.•7004 views

CVE-2023-52387

Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.0011EPSS

CVE•added 2024/02/18 6:15 a.m.•6977 views

CVE-2023-52375

Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.8AI score0.00039EPSS

CVE•added 2024/02/18 4:15 a.m.•6973 views

CVE-2023-52373

Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.

7.5CVSS6.7AI score0.0008EPSS

CVE•added 2024/02/18 4:15 a.m.•6907 views

CVE-2023-52371

Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.

3.5CVSS6.7AI score0.00019EPSS

CVE•added 2024/02/18 6:15 a.m.•6652 views

CVE-2023-52377

Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.

7.4CVSS6.7AI score0.00119EPSS

CVE•added 2024/02/18 4:15 a.m.•6561 views

CVE-2023-52374

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.00105EPSS

CVE•added 2024/02/18 3:15 a.m.•6476 views

CVE-2023-52358

Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.

6.2CVSS6.7AI score0.00022EPSS

CVE•added 2024/02/18 3:15 a.m.•6358 views

CVE-2023-52097

Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.7AI score0.00065EPSS

CVE•added 2024/02/18 7:15 a.m.•6243 views

CVE-2023-52381

Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

9.8CVSS7.1AI score0.00195EPSS

CVE•added 2024/02/18 7:15 a.m.•6129 views

CVE-2023-52380

Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.

4.3CVSS6.7AI score0.00117EPSS

CVE•added 2024/02/18 3:15 a.m.•6109 views

CVE-2023-52361

The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.

7.5CVSS7AI score0.0006EPSS

CVE•added 2024/02/18 4:15 a.m.•5808 views

CVE-2023-52368

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.

5.3CVSS6.7AI score0.00067EPSS

CVE•added 2024/02/18 3:15 a.m.•4605 views

CVE-2023-52362

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.8AI score0.00072EPSS

CVE•added 2024/02/18 4:15 a.m.•4604 views

CVE-2023-52372

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.7AI score0.00084EPSS

CVE•added 2024/02/18 6:15 a.m.•4428 views

CVE-2023-52376

Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.7AI score0.0011EPSS

CVE•added 2024/02/18 4:15 a.m.•4416 views

CVE-2023-52366

Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

7.5CVSS6.6AI score0.00084EPSS

CVE•added 2024/02/18 3:15 a.m.•3932 views

CVE-2023-52360

Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.

7.5CVSS6.9AI score0.00057EPSS

CVE•added 2024/02/18 4:15 a.m.•3931 views

CVE-2023-52370

Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.

9.8CVSS7AI score0.00113EPSS

CVE•added 2024/02/18 4:15 a.m.•2379 views

CVE-2023-52367

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

7.7CVSS6.7AI score0.0002EPSS

CVE•added 2024/02/18 7:15 a.m.•92 views

CVE-2023-52379

Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.0008EPSS

CVE•added 2024/02/18 3:15 a.m.•85 views

CVE-2023-52357

Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.7AI score0.00089EPSS

CVE•added 2022/03/10 5:43 p.m.•79 views

CVE-2021-40053

There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.

9.1CVSS9.1AI score0.00256EPSS

CVE•added 2022/04/11 8:15 p.m.•76 views

CVE-2022-22258

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.

9.8CVSS9.1AI score0.0034EPSS

CVE•added 2025/04/07 4:15 a.m.•74 views

CVE-2025-31175

Deserialization mismatch vulnerability in the DSoftBus moduleImpact: Successful exploitation of this vulnerability may affect service integrity.

8.4CVSS6.9AI score0.00046EPSS

CVE•added 2024/01/16 10:15 a.m.•67 views

CVE-2023-52106

Vulnerability of permission verification for APIs in the DownloadProviderMain module.Impact: Successful exploitation of this vulnerability will affect integrity and availability.

9.1CVSS6.8AI score0.00058EPSS

CVE•added 2023/10/11 1:15 p.m.•64 views

CVE-2023-44116

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.

9.8CVSS9.2AI score0.00074EPSS

CVE•added 2024/04/08 9:15 a.m.•62 views

CVE-2023-52359

Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00097EPSS

CVE•added 2024/09/04 2:15 a.m.•62 views

CVE-2024-45442

Vulnerability of permission verification for APIs in the DownloadProviderMain moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.9AI score0.00071EPSS

CVE•added 2022/05/13 4:15 p.m.•61 views

CVE-2022-22252

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.

7.8CVSS7.5AI score0.00226EPSS

CVE•added 2023/09/25 1:15 p.m.•60 views

CVE-2023-41293

Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.0015EPSS

CVE•added 2024/04/07 8:15 a.m.•59 views

CVE-2024-30415

Vulnerability of improper permission control in the window management module.Impact: Successful exploitation of this vulnerability will affect availability.

9.1CVSS6.8AI score0.00069EPSS

CVE•added 2024/04/08 9:15 a.m.•58 views

CVE-2023-52541

Authentication vulnerability in the API for app pre-loading.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.9AI score0.00051EPSS

CVE•added 2024/04/08 9:15 a.m.•57 views

CVE-2023-52551

Vulnerability of data verification errors in the kernel module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

5.3CVSS6.7AI score0.00016EPSS

CVE•added 2024/07/25 12:15 p.m.•57 views

CVE-2023-7271

Privilege escalation vulnerability in the NMS moduleImpact: Successful exploitation of this vulnerability will affect availability.

5.5CVSS7.4AI score0.00021EPSS

CVE•added 2025/04/07 4:15 a.m.•57 views

CVE-2025-31170

Access control vulnerability in the security verification moduleImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

9.1CVSS7.2AI score0.00018EPSS

CVE•added 2024/04/08 10:15 a.m.•56 views

CVE-2023-52364

Vulnerability of input parameters being not strictly verified in the RSMC module.Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.

6.3CVSS6.8AI score0.00043EPSS

CVE•added 2024/04/08 10:15 a.m.•56 views

CVE-2024-27897

Input verification vulnerability in the call module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.00059EPSS

CVE•added 2023/11/08 10:15 a.m.•55 views

CVE-2023-46762

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 10:15 a.m.•55 views

CVE-2023-46764

Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously.

5.3CVSS5.2AI score0.00079EPSS

CVE•added 2024/04/08 10:15 a.m.•55 views

CVE-2023-52386

Out-of-bounds write vulnerability in the RSMC module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00086EPSS

CVE•added 2024/04/08 9:15 a.m.•55 views

CVE-2023-52553

Race condition vulnerability in the Wi-Fi module.Impact: Successful exploitation of this vulnerability will affect availability.

7.4CVSS6.8AI score0.00057EPSS

CVE•added 2024/04/07 9:15 a.m.•55 views

CVE-2023-52716

Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00072EPSS

CVE•added 2023/09/25 12:15 p.m.•54 views

CVE-2023-41299

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/10/11 1:15 p.m.•54 views

CVE-2023-44108

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

7.5CVSS7.4AI score0.00062EPSS

CVE•added 2024/04/08 9:15 a.m.•54 views

CVE-2023-52538

Vulnerability of package name verification being bypassed in the HwIms module.Impact: Successful exploitation of this vulnerability will affect availability.

9.1CVSS6.8AI score0.00014EPSS

CVE•added 2024/04/08 9:15 a.m.•53 views

CVE-2023-52545

Vulnerability of undefined permissions in the Calendar app.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00071EPSS

CVE•added 2024/06/14 8:15 a.m.•53 views

CVE-2024-36501

Memory management vulnerability in the boottime moduleImpact: Successful exploitation of this vulnerability can affect integrity.

5.6CVSS7.1AI score0.00051EPSS

Total number of security vulnerabilities240