CVE-2025-31175

Deserialization mismatch vulnerability in the DSoftBus moduleImpact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-31173

Memory write permission bypass vulnerability in the kernel futex moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22376

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to bypass user restrictions.

CVE-2024-42038

Vulnerability of PIN enhancement failures in the screen lock moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

CVE-2024-39672

Memory request logic vulnerability in the memory module.Impact: Successful exploitation of this vulnerability will affect integrity and availability.

CVE-2024-42035

Permission control vulnerability in the App Multiplier moduleImpact:Successful exploitation of this vulnerability may affect functionality and confidentiality.

CVE-2024-54098

Service logic error vulnerability in the system service moduleImpact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2024-32997

Race condition vulnerability in the binder driver moduleImpact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-48905

Wasm exception capture vulnerability in the arkweb v8 moduleImpact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.

CVE-2025-48906

Authentication bypass vulnerability in the DSoftBus moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-48911

Vulnerability of improper permission assignment in the note sharing moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-40002

The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.

CVE-2024-51526

Permission control vulnerability in the hidebug moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-40000

The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.

CVE-2023-34154

Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources.

CVE-2021-37134

Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related components.

CVE-2024-58044

Permission verification bypass vulnerability in the notification moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58045

Multi-concurrency vulnerability in the media digital copyright protection moduleImpact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-37086

There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.

CVE-2025-54652

Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module.

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54653

Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module.

CVE-2025-54634

Vulnerability of improper processing of abnormal conditions in huge page separation.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54655

Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module.

CVE-2025-54627

Out-of-bounds write vulnerability in the skia module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58281

Out-of-bounds read vulnerability in the runtime interpreter module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58280

Vulnerability of exposing object heap addresses in the Ark eTS module.Impact: Successful exploitation of this vulnerability may affect availability.