Harmonyos
by Huawei
CVEs (1,067)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-34741 | 0.00 | — | 0.00 | Jul 11, 2022 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. | |||
| CVE-2022-34740 | 0.00 | — | 0.00 | Jul 11, 2022 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. | |||
| CVE-2022-34743 | 0.00 | — | 0.01 | Jul 11, 2022 | The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. | |||
| CVE-2022-34736 | 0.00 | — | 0.01 | Jul 11, 2022 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. | |||
| CVE-2022-34735 | 0.00 | — | 0.01 | Jul 11, 2022 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. | |||
| CVE-2021-46741 | 0.00 | — | 0.01 | Jul 11, 2022 | The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity. | |||
| CVE-2021-40036 | 0.00 | — | 0.01 | Jun 13, 2022 | The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution. | |||
| CVE-2021-46811 | 0.00 | — | 0.00 | Jun 13, 2022 | HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. | |||
| CVE-2022-31753 | 0.00 | — | 0.01 | Jun 13, 2022 | The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. | |||
| CVE-2022-31757 | 0.00 | — | 0.01 | Jun 13, 2022 | The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2021-46812 | 0.00 | — | 0.01 | Jun 13, 2022 | The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. | |||
| CVE-2022-31760 | 0.00 | — | 0.01 | Jun 13, 2022 | Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. | |||
| CVE-2022-31762 | 0.00 | — | 0.00 | Jun 13, 2022 | The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. | |||
| CVE-2022-31759 | 0.00 | — | 0.00 | Jun 13, 2022 | AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. | |||
| CVE-2022-31755 | 0.00 | — | 0.00 | Jun 13, 2022 | The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. | |||
| CVE-2022-31756 | 0.00 | — | 0.00 | Jun 13, 2022 | The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-31751 | 0.00 | — | 0.00 | Jun 13, 2022 | The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. | |||
| CVE-2022-31758 | 0.00 | — | 0.00 | Jun 13, 2022 | The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-31763 | 0.00 | — | 0.00 | Jun 13, 2022 | The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. | |||
| CVE-2021-46814 | 0.00 | — | 0.01 | Jun 13, 2022 | The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. |
- CVE-2022-34741Jul 11, 2022risk 0.00cvss —epss 0.00
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
- CVE-2022-34740Jul 11, 2022risk 0.00cvss —epss 0.00
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
- CVE-2022-34743Jul 11, 2022risk 0.00cvss —epss 0.01
The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.
- CVE-2022-34736Jul 11, 2022risk 0.00cvss —epss 0.01
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
- CVE-2022-34735Jul 11, 2022risk 0.00cvss —epss 0.01
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
- CVE-2021-46741Jul 11, 2022risk 0.00cvss —epss 0.01
The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.
- CVE-2021-40036Jun 13, 2022risk 0.00cvss —epss 0.01
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.
- CVE-2021-46811Jun 13, 2022risk 0.00cvss —epss 0.00
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.
- CVE-2022-31753Jun 13, 2022risk 0.00cvss —epss 0.01
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.
- CVE-2022-31757Jun 13, 2022risk 0.00cvss —epss 0.01
The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2021-46812Jun 13, 2022risk 0.00cvss —epss 0.01
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.
- CVE-2022-31760Jun 13, 2022risk 0.00cvss —epss 0.01
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
- CVE-2022-31762Jun 13, 2022risk 0.00cvss —epss 0.00
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.
- CVE-2022-31759Jun 13, 2022risk 0.00cvss —epss 0.00
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.
- CVE-2022-31755Jun 13, 2022risk 0.00cvss —epss 0.00
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
- CVE-2022-31756Jun 13, 2022risk 0.00cvss —epss 0.00
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-31751Jun 13, 2022risk 0.00cvss —epss 0.00
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
- CVE-2022-31758Jun 13, 2022risk 0.00cvss —epss 0.00
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-31763Jun 13, 2022risk 0.00cvss —epss 0.00
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.
- CVE-2021-46814Jun 13, 2022risk 0.00cvss —epss 0.01
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
Page 42 of 54