Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-24926 | Hig | 0.55 | 8.4 | 0.00 | Feb 6, 2026 | Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-68960 | Hig | 0.55 | 8.4 | 0.00 | Jan 14, 2026 | Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-68957 | Hig | 0.55 | 8.4 | 0.00 | Jan 14, 2026 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-66328 | Hig | 0.55 | 8.4 | 0.00 | Dec 8, 2025 | Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-66324 | Hig | 0.55 | 8.4 | 0.00 | Dec 8, 2025 | Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity. | ||
| CVE-2025-58302 | Hig | 0.55 | 8.4 | 0.00 | Nov 28, 2025 | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2025-58303 | Hig | 0.55 | 8.4 | 0.00 | Nov 28, 2025 | UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58299 | Hig | 0.55 | 8.4 | 0.00 | Oct 11, 2025 | Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58281 | Hig | 0.55 | 8.4 | 0.00 | Sep 5, 2025 | Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-58280 | Hig | 0.55 | 8.4 | 0.00 | Sep 5, 2025 | Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54653 | Hig | 0.55 | 8.4 | 0.00 | Aug 6, 2025 | Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module. | ||
| CVE-2025-54652 | Hig | 0.55 | 8.4 | 0.00 | Aug 6, 2025 | Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module. | ||
| CVE-2025-31175 | Hig | 0.55 | 8.4 | 0.00 | Apr 7, 2025 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. | ||
| CVE-2025-31170 | Hig | 0.55 | 8.4 | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2024-58127 | Hig | 0.55 | 8.4 | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2024-58126 | Hig | 0.55 | 8.4 | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2024-58125 | Hig | 0.55 | 8.4 | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2024-58124 | Hig | 0.55 | 8.4 | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | ||
| CVE-2024-58044 | Hig | 0.55 | 8.4 | 0.00 | Mar 4, 2025 | Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-54098 | Hig | 0.55 | 8.5 | 0.00 | Dec 12, 2024 | Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity. |
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity.
- risk 0.55cvss 8.4epss 0.00
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.55cvss 8.4epss 0.00
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.4epss 0.00
Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module.
- risk 0.55cvss 8.4epss 0.00
Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module.
- risk 0.55cvss 8.4epss 0.00
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.
- risk 0.55cvss 8.4epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.55cvss 8.4epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.55cvss 8.4epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.55cvss 8.4epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.55cvss 8.4epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- risk 0.55cvss 8.4epss 0.00
Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.55cvss 8.5epss 0.00
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.
Page 8 of 54