Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-34863 | Med | 0.44 | 6.7 | 0.00 | Apr 13, 2026 | Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-28547 | Med | 0.44 | 6.8 | 0.00 | Mar 5, 2026 | Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-24918 | Med | 0.44 | 6.8 | 0.00 | Feb 6, 2026 | Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-68969 | Med | 0.44 | 6.8 | 0.00 | Jan 14, 2026 | Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-66326 | Med | 0.44 | 6.7 | 0.00 | Dec 8, 2025 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58309 | Med | 0.44 | 6.8 | 0.00 | Nov 28, 2025 | Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2025-58276 | Med | 0.44 | 6.8 | 0.00 | Sep 5, 2025 | Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54642 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54641 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54633 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-54632 | Med | 0.44 | 6.8 | 0.00 | Aug 6, 2025 | Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. | ||
| CVE-2025-54631 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54630 | Med | 0.44 | 6.8 | 0.00 | Aug 6, 2025 | :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54629 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity. | ||
| CVE-2025-54625 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54617 | Med | 0.44 | 6.8 | 0.00 | Aug 6, 2025 | Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE. | ||
| CVE-2025-48908 | Med | 0.44 | 6.7 | 0.00 | Jun 6, 2025 | Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-31174 | Med | 0.44 | 6.8 | 0.00 | Apr 7, 2025 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-31171 | Med | 0.44 | 6.8 | 0.00 | Apr 7, 2025 | File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-27521 | Med | 0.44 | 6.8 | 0.00 | Mar 4, 2025 | Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
- risk 0.44cvss 6.7epss 0.00
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.7epss 0.00
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.44cvss 6.8epss 0.00
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.7epss 0.00
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.7epss 0.00
Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.7epss 0.00
Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.44cvss 6.8epss 0.00
Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity.
- risk 0.44cvss 6.7epss 0.00
Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.7epss 0.00
Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
- risk 0.44cvss 6.7epss 0.00
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE.
- risk 0.44cvss 6.7epss 0.00
Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.44cvss 6.8epss 0.00
Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.44cvss 6.8epss 0.00
File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.44cvss 6.8epss 0.00
Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Page 33 of 54