Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Filtered by product Harmonyos
Total 872 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48509 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 5.9 MEDIUM
Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.
CVE-2022-48507 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 7.5 HIGH
Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2021-46894 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 9.8 CRITICAL
Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.
CVE-2021-46892 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 7.5 HIGH
Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-37239 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 7.5 HIGH
Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.
CVE-2023-3456 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 5.3 MEDIUM
Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-37242 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 9.8 CRITICAL
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate the exploitation of other vulnerabilities.
CVE-2023-37245 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 9.1 CRITICAL
Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem.
CVE-2023-37241 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 7.5 HIGH
Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.
CVE-2023-37240 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 9.1 CRITICAL
Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read.
CVE-2023-3455 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 9.1 CRITICAL
Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity.
CVE-2021-46893 1 Huawei 2 Emui, Harmonyos 2023-07-12 N/A 7.5 HIGH
Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity.
CVE-2021-46891 1 Huawei 2 Emui, Harmonyos 2023-07-11 N/A 9.8 CRITICAL
Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
CVE-2021-46890 1 Huawei 2 Emui, Harmonyos 2023-07-11 N/A 9.8 CRITICAL
Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
CVE-2021-40032 1 Huawei 1 Harmonyos 2023-07-06 5.0 MEDIUM 7.5 HIGH
The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-40014 1 Huawei 1 Harmonyos 2023-07-06 5.0 MEDIUM 7.5 HIGH
The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-40027 1 Huawei 1 Harmonyos 2023-07-06 5.0 MEDIUM 7.5 HIGH
The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2023-34165 1 Huawei 1 Harmonyos 2023-06-30 N/A 5.3 MEDIUM
Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions.
CVE-2023-34154 1 Huawei 1 Harmonyos 2023-06-26 N/A 8.2 HIGH
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources.
CVE-2022-48291 1 Huawei 2 Emui, Harmonyos 2023-04-04 N/A 6.5 MEDIUM
The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.