Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-24915 | Med | 0.40 | 6.2 | 0.00 | Feb 6, 2026 | Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2025-68970 | Med | 0.40 | 6.1 | 0.00 | Jan 14, 2026 | Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-68964 | Med | 0.40 | 6.2 | 0.00 | Jan 14, 2026 | Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-68959 | Med | 0.40 | 6.2 | 0.00 | Jan 14, 2026 | Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-66325 | Med | 0.40 | 6.2 | 0.00 | Dec 8, 2025 | Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-58305 | Med | 0.40 | 6.2 | 0.00 | Nov 28, 2025 | Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-58294 | Med | 0.40 | 6.2 | 0.00 | Nov 28, 2025 | Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-58301 | Med | 0.40 | 6.2 | 0.00 | Oct 11, 2025 | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58300 | Med | 0.40 | 6.2 | 0.00 | Oct 11, 2025 | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58278 | Med | 0.40 | 6.2 | 0.00 | Oct 11, 2025 | Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-54654 | Med | 0.40 | 6.2 | 0.00 | Oct 11, 2025 | Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality | ||
| CVE-2025-54615 | Med | 0.40 | 6.2 | 0.00 | Aug 6, 2025 | Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-54614 | Med | 0.40 | 6.2 | 0.00 | Aug 6, 2025 | Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54608 | Med | 0.40 | 6.2 | 0.00 | Aug 6, 2025 | Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set. | ||
| CVE-2025-48907 | Med | 0.40 | 6.2 | 0.00 | Jun 6, 2025 | Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-46591 | Med | 0.40 | 6.2 | 0.00 | May 6, 2025 | Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-46587 | Med | 0.40 | 6.2 | 0.00 | May 6, 2025 | Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-58252 | Med | 0.40 | 6.2 | 0.00 | May 6, 2025 | Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-58050 | Med | 0.40 | 6.2 | 0.00 | Mar 4, 2025 | Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-58046 | Med | 0.40 | 6.2 | 0.00 | Mar 4, 2025 | Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
- risk 0.40cvss 6.2epss 0.00
Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.40cvss 6.1epss 0.00
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
- risk 0.40cvss 6.2epss 0.00
Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.
- risk 0.40cvss 6.2epss 0.00
Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Page 37 of 54