Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-58110 | Med | 0.30 | 4.6 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58109 | Med | 0.30 | 4.6 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58108 | Med | 0.30 | 4.6 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58106 | Med | 0.30 | 4.6 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2021-40006 | Med | 0.30 | 4.6 | 0.00 | Jan 10, 2022 | Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality. | ||
| CVE-2026-28543 | Med | 0.29 | 4.4 | 0.00 | Mar 5, 2026 | Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58279 | Med | 0.29 | 4.4 | 0.00 | Dec 8, 2025 | Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-64315 | Med | 0.29 | 4.4 | 0.00 | Nov 28, 2025 | Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity. | ||
| CVE-2025-54649 | Med | 0.29 | 4.5 | 0.00 | Aug 6, 2025 | Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect. | ||
| CVE-2025-54637 | Med | 0.29 | 4.4 | 0.00 | Aug 6, 2025 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-54636 | Med | 0.29 | 4.4 | 0.00 | Aug 6, 2025 | Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54626 | Med | 0.29 | 4.4 | 0.00 | Aug 6, 2025 | Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. | ||
| CVE-2025-48904 | Med | 0.29 | 4.4 | 0.00 | Jun 6, 2025 | Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-46592 | Med | 0.29 | 4.4 | 0.00 | May 6, 2025 | Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-46589 | Med | 0.29 | 4.4 | 0.00 | May 6, 2025 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2025-46588 | Med | 0.29 | 4.4 | 0.00 | May 6, 2025 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2023-52954 | Med | 0.29 | 4.4 | 0.00 | Jan 8, 2025 | Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-56434 | Med | 0.29 | 4.4 | 0.00 | Jan 8, 2025 | UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. | ||
| CVE-2024-54114 | Med | 0.29 | 4.4 | 0.00 | Dec 12, 2024 | Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-47294 | Med | 0.29 | 4.4 | 0.00 | Sep 27, 2024 | Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability. |
- risk 0.30cvss 4.6epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.30cvss 4.6epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.30cvss 4.6epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.30cvss 4.6epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.30cvss 4.6epss 0.00
Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.
- risk 0.29cvss 4.4epss 0.00
Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.29cvss 4.4epss 0.00
Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.29cvss 4.4epss 0.00
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.
- risk 0.29cvss 4.5epss 0.00
Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect.
- risk 0.29cvss 4.4epss 0.00
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.29cvss 4.4epss 0.00
Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.29cvss 4.4epss 0.00
Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability.
- risk 0.29cvss 4.4epss 0.00
Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.29cvss 4.4epss 0.00
Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.29cvss 4.4epss 0.00
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.29cvss 4.4epss 0.00
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.29cvss 4.4epss 0.00
Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.29cvss 4.4epss 0.00
UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.
- risk 0.29cvss 4.4epss 0.00
Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.29cvss 4.4epss 0.00
Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
Page 50 of 54