HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54617
9.8
0%
Aug 6
Stack-based buffer overflow vulnerability in the dms_fwk module
Affected: 5.1.0
CVE-2024-57961
9.8
0%
Feb 6
Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 3.0.0; 4.2.0
CVE-2024-57959
9.8
0%
Feb 6
Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 4.0.0; 4.2.0; 4.3.0; 5.0.0
CVE-2024-32991
9.8
1%
May 14
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0
CVE-2023-52381
9.8
0%
Feb 18
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52378
9.8
0%
Feb 18
Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 3.0.0; 3.1.0
CVE-2023-52370
9.8
0%
Feb 18
Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52103
9.8
0%
Jan 16
Buffer overflow vulnerability in the FLP module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46773
9.8
1%
Dec 6
Permission management vulnerability in the PMS module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-44116
9.8
0%
Oct 11
Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being…
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44105
9.8
0%
Oct 11
Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44106
9.8
0%
Oct 11
API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2022-48605
9.8
0%
Sep 25
Input verification vulnerability in the fingerprint module
Affected: All versions, or not specified
CVE-2023-41297
9.8
0%
Sep 25
Vulnerability of defects introduced in the design process in the HiviewTunner module
Affected: 2.0.0
CVE-2023-41294
9.8
0%
Sep 25
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services
Affected: 2.1.0
CVE-2023-39405
9.8
0%
Aug 13
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0
CVE-2023-37242
9.8
0%
Jul 6
Vulnerability of commands from the modem being intercepted in the atcmdserver module
Affected: 2.0; 3.0.0
CVE-2022-48513
9.8
0%
Jul 6
Vulnerability of identity verification being bypassed in the Gallery module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0
CVE-2022-48512
9.8
0%
Jul 6
Use After Free (UAF) vulnerability in the Vdecoderservice service
Affected: 2.0.0
CVE-2022-48511
9.8
0%
Jul 6
Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions
Affected: 2.0.0
CVE-2022-48510
9.8
0%
Jul 6
Input verification vulnerability in the AMS module
Affected: 2.0.0
CVE-2021-46894
9.8
0%
Jul 6
Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation
Affected: 2.0.0
CVE-2021-46891
9.8
0%
Jul 5
Vulnerability of incomplete read and write permission verification in the GPU module
Affected: 2.0
CVE-2021-46890
9.8
0%
Jul 5
Vulnerability of incomplete read and write permission verification in the GPU module
Affected: 2.0
CVE-2022-48479
9.8
0%
May 26
The facial recognition TA of some products has the out-of-bounds memory read vulnerability
Affected: 2.0
CVE-2022-48478
9.8
0%
May 26
The facial recognition TA of some products lacks memory length verification
Affected: 2.0
CVE-2022-48353
9.8
0%
Mar 27
Some smartphones have configuration issues
Affected: 2.0
CVE-2022-46327
9.8
0%
Dec 20
Some smartphones have configuration issues
Affected: before 2.0
CVE-2022-46326
9.8
1%
Dec 20
Some smartphones have the out-of-bounds write vulnerability
Affected: before 2.0
CVE-2022-46325
9.8
1%
Dec 20
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions
Affected: before 2.0
CVE-2022-46324
9.8
1%
Dec 20
Some smartphones have the out-of-bounds write vulnerability
Affected: before 2.0
CVE-2022-46323
9.8
1%
Dec 20
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions
Affected: before 2.0
CVE-2022-46320
9.8
1%
Dec 20
The kernel module has an out-of-bounds read vulnerability
Affected: before 2.0
CVE-2022-46319
9.8
1%
Dec 20
Fingerprint calibration has a vulnerability of lacking boundary judgment
Affected: before 2.0
CVE-2022-46316
9.8
1%
Dec 20
A thread security vulnerability exists in the authentication process
Affected: before 2.1
CVE-2022-44562
9.8
1%
Nov 9
The system framework layer has a vulnerability of serialization/deserialization mismatch
Affected: 2.0; 2.1; 3.0.0
CVE-2022-44559
9.8
1%
Nov 9
The AMS module has a vulnerability of serialization/deserialization mismatch
Affected: 2.0; 2.1; 3.0.0
CVE-2022-44558
9.8
1%
Nov 9
The AMS module has a vulnerability of serialization/deserialization mismatch
Affected: 2.0; 2.1
CVE-2022-44551
9.8
0%
Nov 9
The iaware module has a vulnerability in thread security
Affected: 2.0; 2.1
CVE-2021-46851
9.8
1%
Nov 9
The DRM module has a vulnerability in verifying the secure memory attributes
Affected: 2.0
CVE-2022-38983
9.8
1%
Oct 14
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution
Affected: 2.0; 2.1
CVE-2022-41578
9.8
1%
Oct 14
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying…
Affected: 2.0; 2.1
CVE-2022-41580
9.8
1%
Oct 14
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in…
Affected: 2.0
CVE-2022-38980
9.8
1%
Oct 14
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to…
Affected: 2.0; 2.1
CVE-2022-38982
9.8
1%
Oct 14
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked
Affected: 2.0
CVE-2022-39009
9.8
1%
Sep 16
The WLAN module has a vulnerability in permission verification
Affected: 2.0; 2.1
CVE-2022-39007
9.8
1%
Sep 16
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation
Affected: 2.0; 2.1
CVE-2022-39002
9.8
1%
Sep 16
Double free vulnerability in the storage module
Affected: 2.0
CVE-2022-39000
9.8
1%
Sep 16
The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup
Affected: 2.0; 2.1
CVE-2022-38999
9.8
1%
Sep 16
The AOD module has the improper update of reference count vulnerability
Affected: 2.0
Page 1 of 3 · 138 total
The 500 most important CVEs for this product (exploited first, then by severity)