Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Filtered by product Harmonyos
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6273 1 Huawei 2 Emui, Harmonyos 2023-12-12 N/A 5.3 MEDIUM
Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2023-49248 1 Huawei 2 Emui, Harmonyos 2023-12-12 N/A 5.5 MEDIUM
Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause unauthorized file access.
CVE-2023-46756 1 Huawei 2 Emui, Harmonyos 2023-11-15 N/A 5.3 MEDIUM
Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.
CVE-2023-46763 1 Huawei 2 Emui, Harmonyos 2023-11-15 N/A 5.3 MEDIUM
Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously.
CVE-2023-46764 1 Huawei 2 Emui, Harmonyos 2023-11-15 N/A 5.3 MEDIUM
Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously.
CVE-2022-48613 1 Huawei 2 Emui, Harmonyos 2023-11-14 N/A 5.9 MEDIUM
Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed.
CVE-2023-46755 1 Huawei 2 Emui, Harmonyos 2023-11-14 N/A 5.3 MEDIUM
Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart.
CVE-2023-39387 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 5.3 MEDIUM
Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.
CVE-2021-40006 1 Huawei 1 Harmonyos 2023-08-13 2.1 LOW 4.6 MEDIUM
Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.
CVE-2021-37112 1 Huawei 1 Harmonyos 2023-08-08 5.0 MEDIUM 5.3 MEDIUM
Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.
CVE-2022-34741 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-19 3.3 LOW 6.5 MEDIUM
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
CVE-2022-34740 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-19 3.3 LOW 6.5 MEDIUM
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
CVE-2021-39980 1 Huawei 1 Harmonyos 2022-07-12 5.0 MEDIUM 5.3 MEDIUM
Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure.
CVE-2021-37058 1 Huawei 1 Harmonyos 2022-07-12 5.0 MEDIUM 5.3 MEDIUM
There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with.
CVE-2021-37093 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 5.0 MEDIUM 5.3 MEDIUM
There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.
CVE-2021-46785 1 Huawei 2 Emui, Harmonyos 2022-07-12 5.0 MEDIUM 5.3 MEDIUM
The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
CVE-2022-31751 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 4.9 MEDIUM 5.5 MEDIUM
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31755 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-07-12 2.1 LOW 5.5 MEDIUM
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
CVE-2021-46811 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-06-27 5.0 MEDIUM 5.3 MEDIUM
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.
CVE-2022-31758 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-06-21 1.9 LOW 4.7 MEDIUM
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-31763 1 Huawei 2 Emui, Harmonyos 2022-06-18 4.9 MEDIUM 5.5 MEDIUM
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31759 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-06-18 2.1 LOW 5.5 MEDIUM
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31756 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-06-18 2.1 LOW 5.5 MEDIUM
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-22454 1 Huawei 1 Harmonyos 2022-05-03 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump.
CVE-2021-37023 1 Huawei 1 Harmonyos 2022-05-03 6.4 MEDIUM 6.5 MEDIUM
There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause media files which can be reads and writes in non-distributed directories on any device on the network..
CVE-2021-22465 1 Huawei 1 Harmonyos 2022-05-03 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.
CVE-2021-40045 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-02-16 2.1 LOW 5.5 MEDIUM
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2021-40015 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-02-16 1.9 LOW 4.7 MEDIUM
There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.
CVE-2021-39981 1 Huawei 1 Harmonyos 2022-01-13 4.3 MEDIUM 5.3 MEDIUM
Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call.
CVE-2021-40001 1 Huawei 1 Harmonyos 2022-01-13 5.0 MEDIUM 5.3 MEDIUM
The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.
CVE-2021-40003 1 Huawei 1 Harmonyos 2022-01-13 5.0 MEDIUM 5.3 MEDIUM
HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-40037 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-01-13 4.9 MEDIUM 5.5 MEDIUM
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.
CVE-2021-40009 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-01-13 5.0 MEDIUM 5.3 MEDIUM
There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVE-2021-37132 1 Huawei 1 Harmonyos 2022-01-11 5.0 MEDIUM 5.3 MEDIUM
PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission.
CVE-2021-37118 1 Huawei 1 Harmonyos 2022-01-11 5.0 MEDIUM 5.3 MEDIUM
The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.
CVE-2021-37114 1 Huawei 3 Emui, Harmonyos, Magic Ui 2022-01-11 5.0 MEDIUM 5.3 MEDIUM
There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2021-37039 1 Huawei 3 Emui, Harmonyos, Magic Ui 2021-12-09 3.3 LOW 6.5 MEDIUM
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.
CVE-2021-37082 1 Huawei 1 Harmonyos 2021-12-09 4.3 MEDIUM 5.9 MEDIUM
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.
CVE-2021-37085 1 Huawei 1 Harmonyos 2021-12-09 7.1 HIGH 5.9 MEDIUM
There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.
CVE-2021-37013 1 Huawei 1 Harmonyos 2021-11-29 5.0 MEDIUM 5.3 MEDIUM
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.
CVE-2021-22456 1 Huawei 1 Harmonyos 2021-11-02 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.
CVE-2021-22459 1 Huawei 1 Harmonyos 2021-11-02 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable.
CVE-2021-22460 1 Huawei 1 Harmonyos 2021-11-02 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism.
CVE-2021-22455 1 Huawei 1 Harmonyos 2021-11-02 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is not released.
CVE-2021-22461 1 Huawei 1 Harmonyos 2021-11-01 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
CVE-2021-22462 1 Huawei 1 Harmonyos 2021-11-01 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.
CVE-2021-22467 1 Huawei 1 Harmonyos 2021-11-01 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.
CVE-2021-22463 1 Huawei 1 Harmonyos 2021-11-01 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure.
CVE-2021-22471 1 Huawei 1 Harmonyos 2021-11-01 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
CVE-2021-22466 1 Huawei 1 Harmonyos 2021-11-01 2.1 LOW 5.5 MEDIUM
A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.