HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54617 | 9.8 | Aug 6 | Stack-based buffer overflow vulnerability in the dms_fwk module Affected: 5.1.0 |
| CVE-2024-57961 | 9.8 | Feb 6 | Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 3.0.0; 4.2.0 |
| CVE-2024-57959 | 9.8 | Feb 6 | Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 4.0.0; 4.2.0; 4.3.0; 5.0.0 |
| CVE-2024-32991 | 9.8 | May 14 | Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2023-52381 | 9.8 | Feb 18 | Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52378 | 9.8 | Feb 18 | Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 3.0.0; 3.1.0 |
| CVE-2023-52370 | 9.8 | Feb 18 | Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52103 | 9.8 | Jan 16 | Buffer overflow vulnerability in the FLP module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46773 | 9.8 | Dec 6 | Permission management vulnerability in the PMS module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44116 | 9.8 | Oct 11 | Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being… Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44105 | 9.8 | Oct 11 | Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44106 | 9.8 | Oct 11 | API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2022-48605 | 9.8 | Sep 25 | Input verification vulnerability in the fingerprint module Affected: All versions, or not specified |
| CVE-2023-41297 | 9.8 | Sep 25 | Vulnerability of defects introduced in the design process in the HiviewTunner module Affected: 2.0.0 |
| CVE-2023-41294 | 9.8 | Sep 25 | The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services Affected: 2.1.0 |
| CVE-2023-39405 | 9.8 | Aug 13 | Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0 |
| CVE-2023-37242 | 9.8 | Jul 6 | Vulnerability of commands from the modem being intercepted in the atcmdserver module Affected: 2.0; 3.0.0 |
| CVE-2022-48513 | 9.8 | Jul 6 | Vulnerability of identity verification being bypassed in the Gallery module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0 |
| CVE-2022-48512 | 9.8 | Jul 6 | Use After Free (UAF) vulnerability in the Vdecoderservice service Affected: 2.0.0 |
| CVE-2022-48511 | 9.8 | Jul 6 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions Affected: 2.0.0 |
| CVE-2022-48510 | 9.8 | Jul 6 | Input verification vulnerability in the AMS module Affected: 2.0.0 |
| CVE-2021-46894 | 9.8 | Jul 6 | Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation Affected: 2.0.0 |
| CVE-2021-46891 | 9.8 | Jul 5 | Vulnerability of incomplete read and write permission verification in the GPU module Affected: 2.0 |
| CVE-2021-46890 | 9.8 | Jul 5 | Vulnerability of incomplete read and write permission verification in the GPU module Affected: 2.0 |
| CVE-2022-48479 | 9.8 | May 26 | The facial recognition TA of some products has the out-of-bounds memory read vulnerability Affected: 2.0 |
| CVE-2022-48478 | 9.8 | May 26 | The facial recognition TA of some products lacks memory length verification Affected: 2.0 |
| CVE-2022-48353 | 9.8 | Mar 27 | Some smartphones have configuration issues Affected: 2.0 |
| CVE-2022-46327 | 9.8 | Dec 20 | Some smartphones have configuration issues Affected: before 2.0 |
| CVE-2022-46326 | 9.8 | Dec 20 | Some smartphones have the out-of-bounds write vulnerability Affected: before 2.0 |
| CVE-2022-46325 | 9.8 | Dec 20 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions Affected: before 2.0 |
| CVE-2022-46324 | 9.8 | Dec 20 | Some smartphones have the out-of-bounds write vulnerability Affected: before 2.0 |
| CVE-2022-46323 | 9.8 | Dec 20 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions Affected: before 2.0 |
| CVE-2022-46320 | 9.8 | Dec 20 | The kernel module has an out-of-bounds read vulnerability Affected: before 2.0 |
| CVE-2022-46319 | 9.8 | Dec 20 | Fingerprint calibration has a vulnerability of lacking boundary judgment Affected: before 2.0 |
| CVE-2022-46316 | 9.8 | Dec 20 | A thread security vulnerability exists in the authentication process Affected: before 2.1 |
| CVE-2022-44562 | 9.8 | Nov 9 | The system framework layer has a vulnerability of serialization/deserialization mismatch Affected: 2.0; 2.1; 3.0.0 |
| CVE-2022-44559 | 9.8 | Nov 9 | The AMS module has a vulnerability of serialization/deserialization mismatch Affected: 2.0; 2.1; 3.0.0 |
| CVE-2022-44558 | 9.8 | Nov 9 | The AMS module has a vulnerability of serialization/deserialization mismatch Affected: 2.0; 2.1 |
| CVE-2022-44551 | 9.8 | Nov 9 | The iaware module has a vulnerability in thread security Affected: 2.0; 2.1 |
| CVE-2021-46851 | 9.8 | Nov 9 | The DRM module has a vulnerability in verifying the secure memory attributes Affected: 2.0 |
| CVE-2022-38983 | 9.8 | Oct 14 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution Affected: 2.0; 2.1 |
| CVE-2022-41578 | 9.8 | Oct 14 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying… Affected: 2.0; 2.1 |
| CVE-2022-41580 | 9.8 | Oct 14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in… Affected: 2.0 |
| CVE-2022-38980 | 9.8 | Oct 14 | The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to… Affected: 2.0; 2.1 |
| CVE-2022-38982 | 9.8 | Oct 14 | The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked Affected: 2.0 |
| CVE-2022-39009 | 9.8 | Sep 16 | The WLAN module has a vulnerability in permission verification Affected: 2.0; 2.1 |
| CVE-2022-39007 | 9.8 | Sep 16 | The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation Affected: 2.0; 2.1 |
| CVE-2022-39002 | 9.8 | Sep 16 | Double free vulnerability in the storage module Affected: 2.0 |
| CVE-2022-39000 | 9.8 | Sep 16 | The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup Affected: 2.0; 2.1 |
| CVE-2022-38999 | 9.8 | Sep 16 | The AOD module has the improper update of reference count vulnerability Affected: 2.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
