Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Filtered by product Harmonyos
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-46773 1 Huawei 2 Emui, Harmonyos 2023-12-11 N/A 9.8 CRITICAL
Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation.
CVE-2023-5801 1 Huawei 2 Emui, Harmonyos 2023-11-15 N/A 9.1 CRITICAL
Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality.
CVE-2023-39405 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.8 CRITICAL
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges.
CVE-2023-39385 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access.
CVE-2021-46895 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.
CVE-2023-39401 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVE-2023-39398 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVE-2023-39400 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVE-2023-39399 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVE-2023-39402 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVE-2023-39403 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 9.1 CRITICAL
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVE-2022-39007 1 Huawei 2 Emui, Harmonyos 2023-08-08 N/A 9.8 CRITICAL
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation.
CVE-2022-44562 1 Huawei 2 Emui, Harmonyos 2023-08-08 N/A 9.8 CRITICAL
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
CVE-2022-37002 1 Huawei 3 Emui, Harmonyos, Magic Ui 2023-08-08 N/A 9.8 CRITICAL
The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.
CVE-2021-37021 1 Huawei 3 Emui, Harmonyos, Magic Ui 2023-08-08 6.4 MEDIUM 9.1 CRITICAL
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVE-2021-37020 1 Huawei 3 Emui, Harmonyos, Magic Ui 2023-08-08 6.4 MEDIUM 9.1 CRITICAL
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVE-2021-40017 1 Huawei 2 Emui, Harmonyos 2023-08-08 N/A 9.8 CRITICAL
The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVE-2021-37079 1 Huawei 1 Harmonyos 2023-08-08 6.4 MEDIUM 9.1 CRITICAL
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by system_app permission.
CVE-2022-34737 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-19 6.4 MEDIUM 9.1 CRITICAL
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
CVE-2021-37040 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 6.8 MEDIUM 9.8 CRITICAL
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.
CVE-2021-22430 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 7.5 HIGH 9.8 CRITICAL
There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection.
CVE-2021-37045 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 10.0 HIGH 9.8 CRITICAL
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.
CVE-2021-46742 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 6.4 MEDIUM 9.1 CRITICAL
The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.
CVE-2021-40036 1 Huawei 1 Harmonyos 2022-06-27 7.5 HIGH 9.8 CRITICAL
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.
CVE-2022-31760 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-06-27 6.4 MEDIUM 9.1 CRITICAL
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
CVE-2021-46786 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-05-23 7.5 HIGH 9.8 CRITICAL
The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
CVE-2022-22260 1 Huawei 2 Emui, Harmonyos 2022-05-23 6.4 MEDIUM 9.1 CRITICAL
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.
CVE-2022-29794 1 Huawei 2 Emui, Harmonyos 2022-05-23 7.5 HIGH 9.8 CRITICAL
The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.
CVE-2022-22258 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-05-13 7.5 HIGH 9.8 CRITICAL
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.
CVE-2021-40010 1 Huawei 1 Harmonyos 2022-05-13 7.5 HIGH 9.8 CRITICAL
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
CVE-2021-39990 1 Huawei 1 Harmonyos 2022-01-14 7.5 HIGH 9.8 CRITICAL
The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.
CVE-2021-39982 1 Huawei 1 Harmonyos 2022-01-13 6.4 MEDIUM 9.1 CRITICAL
Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications.
CVE-2021-39979 1 Huawei 1 Harmonyos 2022-01-13 10.0 HIGH 9.8 CRITICAL
HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.
CVE-2021-39996 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-01-13 7.5 HIGH 9.8 CRITICAL
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow.
CVE-2021-37128 1 Huawei 1 Harmonyos 2022-01-11 7.5 HIGH 9.8 CRITICAL
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
CVE-2021-37116 1 Huawei 1 Harmonyos 2022-01-11 6.4 MEDIUM 9.1 CRITICAL
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.
CVE-2021-37088 1 Huawei 1 Harmonyos 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any file.
CVE-2021-37049 1 Huawei 3 Emui, Harmonyos, Magic Ui 2021-12-09 7.5 HIGH 9.8 CRITICAL
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.
CVE-2021-37064 1 Huawei 1 Harmonyos 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to arbitrary file created.
CVE-2021-37051 1 Huawei 3 Emui, Harmonyos, Magic Ui 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
CVE-2021-37011 1 Huawei 1 Harmonyos 2021-12-09 9.4 HIGH 9.1 CRITICAL
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVE-2021-37059 1 Huawei 1 Harmonyos 2021-12-09 7.5 HIGH 9.8 CRITICAL
There is a Weaknesses Introduced During Design
CVE-2021-37062 1 Huawei 1 Harmonyos 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and information leakage.
CVE-2021-37063 1 Huawei 1 Harmonyos 2021-12-09 7.5 HIGH 9.8 CRITICAL
There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices.
CVE-2021-37065 1 Huawei 1 Harmonyos 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted.
CVE-2021-37087 1 Huawei 1 Harmonyos 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file.
CVE-2021-37095 1 Huawei 1 Harmonyos 2021-12-09 7.5 HIGH 9.8 CRITICAL
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution.
CVE-2021-37099 1 Huawei 1 Harmonyos 2021-12-09 6.4 MEDIUM 9.1 CRITICAL
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file.
CVE-2021-37084 1 Huawei 1 Harmonyos 2021-12-09 7.5 HIGH 9.8 CRITICAL
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.
CVE-2021-37022 1 Huawei 1 Harmonyos 2021-11-29 10.0 HIGH 9.8 CRITICAL
There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated.