Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-46741 | Hig | 0.49 | 7.5 | 0.01 | Jul 12, 2022 | The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity. | ||
| CVE-2021-40012 | Hig | 0.49 | 7.5 | 0.01 | Jul 12, 2022 | Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality. | ||
| CVE-2022-31757 | Hig | 0.49 | 7.5 | 0.01 | Jun 13, 2022 | The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. | ||
| CVE-2022-31753 | Hig | 0.49 | 7.5 | 0.01 | Jun 13, 2022 | The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. | ||
| CVE-2021-46812 | Hig | 0.49 | 7.5 | 0.01 | Jun 13, 2022 | The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. | ||
| CVE-2021-46814 | Hig | 0.49 | 7.5 | 0.01 | Jun 13, 2022 | The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. | ||
| CVE-2022-22252 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability. | ||
| CVE-2022-29796 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. | ||
| CVE-2022-29795 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. | ||
| CVE-2022-29793 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability. | ||
| CVE-2022-29792 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. | ||
| CVE-2022-29791 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. | ||
| CVE-2022-29790 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions. | ||
| CVE-2022-29789 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services. | ||
| CVE-2022-22261 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. | ||
| CVE-2021-46787 | Hig | 0.49 | 7.5 | 0.01 | May 13, 2022 | The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash. | ||
| CVE-2022-22257 | Hig | 0.49 | 7.5 | 0.01 | Apr 11, 2022 | The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. | ||
| CVE-2022-22256 | Hig | 0.49 | 7.5 | 0.01 | Apr 11, 2022 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. | ||
| CVE-2022-22255 | Hig | 0.49 | 7.5 | 0.01 | Apr 11, 2022 | The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. | ||
| CVE-2022-22254 | Hig | 0.49 | 7.5 | 0.01 | Apr 11, 2022 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. |
- risk 0.49cvss 7.5epss 0.01
The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.
- risk 0.49cvss 7.5epss 0.01
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.
- risk 0.49cvss 7.5epss 0.01
The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.
- risk 0.49cvss 7.5epss 0.01
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.
- risk 0.49cvss 7.5epss 0.01
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.
- risk 0.49cvss 7.5epss 0.01
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
- risk 0.49cvss 7.5epss 0.01
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.
- risk 0.49cvss 7.5epss 0.01
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- risk 0.49cvss 7.5epss 0.01
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
- risk 0.49cvss 7.5epss 0.01
There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.
- risk 0.49cvss 7.5epss 0.01
The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.
- risk 0.49cvss 7.5epss 0.01
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- risk 0.49cvss 7.5epss 0.01
The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.
- risk 0.49cvss 7.5epss 0.01
The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.
- risk 0.49cvss 7.5epss 0.01
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- risk 0.49cvss 7.5epss 0.01
The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
- risk 0.49cvss 7.5epss 0.01
The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
- risk 0.49cvss 7.5epss 0.01
The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- risk 0.49cvss 7.5epss 0.01
The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.
- risk 0.49cvss 7.5epss 0.01
A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.
Page 25 of 54