Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-56438 | Med | 0.39 | 6.0 | 0.00 | Jan 8, 2025 | Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-34859 | Med | 0.38 | 5.9 | 0.00 | Apr 13, 2026 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2026-28546 | Med | 0.38 | 5.9 | 0.00 | Mar 5, 2026 | Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-28545 | Med | 0.38 | 5.9 | 0.00 | Mar 5, 2026 | Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-28538 | Med | 0.38 | 5.9 | 0.00 | Mar 5, 2026 | Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-24928 | Med | 0.38 | 5.8 | 0.00 | Feb 6, 2026 | Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2026-24931 | Med | 0.38 | 5.9 | 0.00 | Feb 6, 2026 | Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2026-24929 | Med | 0.38 | 5.9 | 0.00 | Feb 6, 2026 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-24916 | Med | 0.38 | 5.9 | 0.00 | Feb 6, 2026 | Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-58311 | Med | 0.38 | 5.8 | 0.00 | Nov 28, 2025 | UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2025-58289 | Med | 0.38 | 5.9 | 0.00 | Oct 11, 2025 | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58297 | Med | 0.38 | 5.9 | 0.00 | Oct 11, 2025 | Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58295 | Med | 0.38 | 5.9 | 0.00 | Oct 11, 2025 | Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58284 | Med | 0.38 | 5.9 | 0.00 | Oct 11, 2025 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-54635 | Med | 0.38 | 5.9 | 0.00 | Aug 6, 2025 | Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54613 | Med | 0.38 | 5.9 | 0.00 | Aug 6, 2025 | Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. | ||
| CVE-2025-54612 | Med | 0.38 | 5.9 | 0.00 | Aug 6, 2025 | Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. | ||
| CVE-2025-53186 | Med | 0.38 | 5.9 | 0.00 | Jul 7, 2025 | Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-5465 | Med | 0.38 | 5.9 | 0.00 | Jun 14, 2024 | Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-32998 | Med | 0.38 | 5.9 | 0.00 | May 14, 2024 | NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. |
- risk 0.39cvss 6.0epss 0.00
Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.38cvss 5.9epss 0.00
Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.8epss 0.00
Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.38cvss 5.9epss 0.00
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.38cvss 5.9epss 0.00
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.38cvss 5.8epss 0.00
UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.38cvss 5.9epss 0.00
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.38cvss 5.9epss 0.00
Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.
- risk 0.38cvss 5.9epss 0.00
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.
- risk 0.38cvss 5.9epss 0.00
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss 5.9epss 0.00
Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.38cvss 5.9epss 0.00
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.
Page 40 of 54