Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-22431 | Cri | 0.64 | 9.8 | 0.01 | Feb 25, 2022 | There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. | ||
| CVE-2021-22430 | Cri | 0.64 | 9.8 | 0.01 | Feb 25, 2022 | There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection. | ||
| CVE-2021-22429 | Cri | 0.64 | 9.8 | 0.01 | Feb 25, 2022 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. | ||
| CVE-2021-22426 | Cri | 0.64 | 9.8 | 0.01 | Feb 25, 2022 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. | ||
| CVE-2021-40010 | Cri | 0.64 | 9.8 | 0.01 | Jan 10, 2022 | The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution. | ||
| CVE-2021-39996 | Cri | 0.64 | 9.8 | 0.01 | Jan 10, 2022 | There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow. | ||
| CVE-2021-39990 | Cri | 0.64 | 9.8 | 0.01 | Jan 3, 2022 | The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience. | ||
| CVE-2021-39979 | Cri | 0.64 | 9.8 | 0.01 | Jan 3, 2022 | HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity. | ||
| CVE-2021-37128 | Cri | 0.64 | 9.8 | 0.01 | Jan 3, 2022 | HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file. | ||
| CVE-2021-37049 | Cri | 0.64 | 9.8 | 0.01 | Dec 8, 2021 | There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects. | ||
| CVE-2021-37045 | Cri | 0.64 | 9.8 | 0.01 | Dec 8, 2021 | There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed. | ||
| CVE-2021-37040 | Cri | 0.64 | 9.8 | 0.01 | Dec 8, 2021 | There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting. | ||
| CVE-2021-37095 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2021 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution. | ||
| CVE-2021-37084 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2021 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages. | ||
| CVE-2021-37063 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2021 | There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices. | ||
| CVE-2021-37059 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2021 | There is a Weaknesses Introduced During Design | ||
| CVE-2021-37022 | Cri | 0.64 | 9.8 | 0.01 | Nov 23, 2021 | There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated. | ||
| CVE-2026-28536 | Cri | 0.62 | 9.6 | 0.00 | Mar 5, 2026 | Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2025-64314 | Cri | 0.60 | 9.3 | 0.00 | Nov 28, 2025 | Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. | ||
| CVE-2024-42037 | Cri | 0.60 | 9.3 | 0.00 | Aug 8, 2024 | Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
- risk 0.64cvss 9.8epss 0.01
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.
- risk 0.64cvss 9.8epss 0.01
There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection.
- risk 0.64cvss 9.8epss 0.01
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
- risk 0.64cvss 9.8epss 0.01
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
- risk 0.64cvss 9.8epss 0.01
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
- risk 0.64cvss 9.8epss 0.01
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow.
- risk 0.64cvss 9.8epss 0.01
The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.
- risk 0.64cvss 9.8epss 0.01
HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.
- risk 0.64cvss 9.8epss 0.01
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
- risk 0.64cvss 9.8epss 0.01
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.
- risk 0.64cvss 9.8epss 0.01
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.
- risk 0.64cvss 9.8epss 0.01
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.
- risk 0.64cvss 9.8epss 0.01
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution.
- risk 0.64cvss 9.8epss 0.01
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.
- risk 0.64cvss 9.8epss 0.01
There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices.
- risk 0.64cvss 9.8epss 0.01
There is a Weaknesses Introduced During Design
- risk 0.64cvss 9.8epss 0.01
There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated.
- risk 0.62cvss 9.6epss 0.00
Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.60cvss 9.3epss 0.00
Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
- risk 0.60cvss 9.3epss 0.00
Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Page 4 of 54