Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-34853 | Hig | 0.50 | 7.7 | 0.00 | Apr 13, 2026 | Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54607 | Hig | 0.50 | 7.7 | 0.00 | Aug 6, 2025 | Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-57960 | Hig | 0.50 | 7.7 | 0.00 | Feb 6, 2025 | Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2021-37000 | Hig | 0.50 | 7.7 | 0.00 | Dec 28, 2024 | Some Huawei wearables have a permission management vulnerability. | ||
| CVE-2023-52713 | Hig | 0.50 | 7.7 | 0.00 | Apr 7, 2024 | Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2023-52367 | Hig | 0.50 | 7.7 | 0.00 | Feb 18, 2024 | Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity. | ||
| CVE-2025-58296 | Hig | 0.49 | 7.5 | 0.00 | Sep 5, 2025 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. | ||
| CVE-2025-53169 | Hig | 0.49 | 7.6 | 0.00 | Jul 7, 2025 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness. | ||
| CVE-2025-46585 | Hig | 0.49 | 7.5 | 0.00 | May 6, 2025 | Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58112 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2025 | Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58111 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2025 | Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58107 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-56444 | Hig | 0.49 | 7.5 | 0.00 | Jan 8, 2025 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-56439 | Hig | 0.49 | 7.5 | 0.00 | Jan 8, 2025 | Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2021-22484 | Hig | 0.49 | 7.5 | 0.00 | Dec 28, 2024 | Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM). | ||
| CVE-2024-51510 | Hig | 0.49 | 7.6 | 0.00 | Nov 5, 2024 | Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-42031 | Hig | 0.49 | 7.5 | 0.00 | Aug 8, 2024 | Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-32992 | Hig | 0.49 | 7.5 | 0.01 | May 14, 2024 | Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-32991 | Hig | 0.49 | 7.5 | 0.01 | May 14, 2024 | Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-27897 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
- risk 0.50cvss 7.7epss 0.00
Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.50cvss 7.7epss 0.00
Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.50cvss 7.7epss 0.00
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.50cvss 7.7epss 0.00
Some Huawei wearables have a permission management vulnerability.
- risk 0.50cvss 7.7epss 0.00
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.50cvss 7.7epss 0.00
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.
- risk 0.49cvss 7.5epss 0.00
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability.
- risk 0.49cvss 7.6epss 0.00
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.
- risk 0.49cvss 7.5epss 0.00
Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.49cvss 7.5epss 0.00
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.49cvss 7.5epss 0.00
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.49cvss 7.5epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.49cvss 7.5epss 0.00
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM).
- risk 0.49cvss 7.6epss 0.00
Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.01
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.01
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Page 11 of 54