Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-45447 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2024 | Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-42032 | Med | 0.29 | 4.4 | 0.00 | Aug 8, 2024 | Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52106 | Med | 0.29 | 4.4 | 0.00 | Jan 16, 2024 | Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. | ||
| CVE-2024-56445 | Med | 0.28 | 4.3 | 0.00 | Jan 8, 2025 | Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. | ||
| CVE-2024-54116 | Med | 0.28 | 4.3 | 0.00 | Dec 12, 2024 | Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. | ||
| CVE-2024-54115 | Med | 0.28 | 4.3 | 0.00 | Dec 12, 2024 | Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-42039 | Med | 0.28 | 4.3 | 0.00 | Sep 4, 2024 | Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52544 | Med | 0.28 | 4.3 | 0.00 | Apr 8, 2024 | Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52380 | Med | 0.28 | 4.3 | 0.00 | Feb 18, 2024 | Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-44110 | Med | 0.28 | 4.3 | 0.00 | Oct 11, 2023 | Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2022-44548 | Med | 0.28 | 4.3 | 0.00 | Nov 9, 2022 | There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing. | ||
| CVE-2026-34858 | Med | 0.27 | 4.1 | 0.00 | Apr 13, 2026 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-34860 | Med | 0.27 | 4.1 | 0.00 | Apr 13, 2026 | Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2025-54650 | Med | 0.27 | 4.2 | 0.00 | Aug 6, 2025 | Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function. | ||
| CVE-2024-56441 | Med | 0.27 | 4.1 | 0.00 | Jan 8, 2025 | Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-54120 | Med | 0.27 | 4.1 | 0.00 | Jan 8, 2025 | Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. | ||
| CVE-2024-45448 | Med | 0.27 | 4.1 | 0.00 | Sep 4, 2024 | Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52720 | Med | 0.27 | 4.1 | 0.00 | May 14, 2024 | Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2026-28550 | Med | 0.26 | 4.0 | 0.00 | Mar 5, 2026 | Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-28541 | Med | 0.26 | 4.0 | 0.00 | Mar 5, 2026 | Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability. |
- risk 0.29cvss 4.4epss 0.00
Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.29cvss 4.4epss 0.00
Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.29cvss 4.4epss 0.00
Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.
- risk 0.28cvss 4.3epss 0.00
Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- risk 0.28cvss 4.3epss 0.00
Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- risk 0.28cvss 4.3epss 0.00
Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.28cvss 4.3epss 0.00
Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.28cvss 4.3epss 0.00
Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.28cvss 4.3epss 0.00
Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.28cvss 4.3epss 0.00
Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.
- risk 0.28cvss 4.3epss 0.00
There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.
- risk 0.27cvss 4.1epss 0.00
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.27cvss 4.1epss 0.00
Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.27cvss 4.2epss 0.00
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function.
- risk 0.27cvss 4.1epss 0.00
Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.27cvss 4.1epss 0.00
Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- risk 0.27cvss 4.1epss 0.00
Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.27cvss 4.1epss 0.00
Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.26cvss 4.0epss 0.00
Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.
Page 51 of 54