Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-28540 | Med | 0.26 | 4.0 | 0.00 | Mar 5, 2026 | Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2026-24914 | Med | 0.26 | 4.0 | 0.00 | Feb 6, 2026 | Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-66329 | Med | 0.26 | 4.0 | 0.00 | Dec 8, 2025 | Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58277 | Med | 0.26 | 4.0 | 0.00 | Oct 11, 2025 | Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-54616 | Med | 0.26 | 4.0 | 0.00 | Aug 6, 2025 | Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-53175 | Med | 0.26 | 4.0 | 0.00 | Jul 7, 2025 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. | ||
| CVE-2025-53174 | Med | 0.26 | 4.0 | 0.00 | Jul 7, 2025 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. | ||
| CVE-2025-53172 | Med | 0.26 | 4.0 | 0.00 | Jul 7, 2025 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. | ||
| CVE-2025-53171 | Med | 0.26 | 4.0 | 0.00 | Jul 7, 2025 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. | ||
| CVE-2025-53170 | Med | 0.26 | 4.0 | 0.00 | Jul 7, 2025 | Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. | ||
| CVE-2024-58117 | Med | 0.26 | 4.0 | 0.00 | Jul 7, 2025 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. | ||
| CVE-2024-58114 | Med | 0.26 | 4.0 | 0.00 | Jun 6, 2025 | Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58116 | Med | 0.26 | 4.0 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-58115 | Med | 0.26 | 4.0 | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-56446 | Med | 0.26 | 4.0 | 0.00 | Jan 8, 2025 | Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-51528 | Med | 0.26 | 4.0 | 0.00 | Nov 5, 2024 | Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-51524 | Med | 0.26 | 4.0 | 0.00 | Nov 5, 2024 | Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-45445 | Med | 0.26 | 4.0 | 0.00 | Sep 4, 2024 | Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-45450 | Med | 0.26 | 4.0 | 0.00 | Sep 4, 2024 | Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-7265 | Med | 0.26 | 4.0 | 0.00 | Aug 8, 2024 | Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability |
- risk 0.26cvss 4.0epss 0.00
Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.26cvss 4.0epss 0.00
Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.26cvss 4.0epss 0.00
Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.
- risk 0.26cvss 4.0epss 0.00
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.
- risk 0.26cvss 4.0epss 0.00
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.
- risk 0.26cvss 4.0epss 0.00
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.
- risk 0.26cvss 4.0epss 0.00
Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability.
- risk 0.26cvss 4.0epss 0.00
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.
- risk 0.26cvss 4.0epss 0.00
Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.26cvss 4.0epss 0.00
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.26cvss 4.0epss 0.00
Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.26cvss 4.0epss 0.00
Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.26cvss 4.0epss 0.00
Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.26cvss 4.0epss 0.00
Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability
Page 52 of 54