HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-40017
9.8
1%
Sep 16
The HW_KEYMASTER module lacks the validity check of the key format
Affected: 2.0
CVE-2022-37003
9.8
1%
Aug 9
The AOD module has a vulnerability in permission assignment
Affected: 2.0
CVE-2022-37002
9.8
1%
Aug 9
The SystemUI module has a privilege escalation vulnerability
Affected: 2.0
CVE-2021-40036
9.8
1%
Jun 13
The bone voice ID TA has a memory overwrite vulnerability
Affected: before 2.0
CVE-2022-29794
9.8
1%
May 13
The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality
Affected: 2.0
CVE-2021-46786
9.8
1%
May 13
The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory…
Affected: 2.0
CVE-2022-22258
9.8
1%
Apr 11
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add…
Affected: 2.0
CVE-2021-40050
9.8
1%
Mar 10
There is an out-of-bounds read vulnerability in the IFAA module
Affected: 2.0
CVE-2021-22480
9.8
1%
Feb 25
The interface of a certain HarmonyOS module has an integer overflow vulnerability
Affected: before 2.0
CVE-2021-22434
9.8
1%
Feb 25
There is a memory address out of bounds vulnerability in smartphones
Affected: 2.0
CVE-2021-22433
9.8
1%
Feb 25
There is a memory address out of bounds in smartphones
Affected: 2.0
CVE-2021-22432
9.8
1%
Feb 25
There is a vulnerability when configuring permission isolation in smartphones
Affected: 2.0
CVE-2021-22431
9.8
1%
Feb 25
There is a vulnerability when configuring permission isolation in smartphones
Affected: 2.0
CVE-2021-22430
9.8
1%
Feb 25
There is a logic bypass vulnerability in smartphones
Affected: 2.0
CVE-2021-22429
9.8
1%
Feb 25
There is a memory address out of bounds in smartphones
Affected: 2.0
CVE-2021-22426
9.8
1%
Feb 25
There is a memory address out of bounds in smartphones
Affected: 2.0
CVE-2021-40010
9.8
1%
Jan 10
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution
Affected: 2.0
CVE-2021-39996
9.8
1%
Jan 10
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones
Affected: before 2.0
CVE-2021-39990
9.8
1%
Jan 3
The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience
Affected: before 2.0
CVE-2021-39979
9.8
1%
Jan 3
HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity
Affected: before 2.0
CVE-2021-37128
9.8
1%
Jan 3
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file
Affected: before 2.0
CVE-2021-37049
9.8
1%
Dec 8
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects
Affected: before 2.0
CVE-2021-37045
9.8
1%
Dec 8
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be…
Affected: before 2.0
CVE-2021-37040
9.8
1%
Dec 8
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting
Affected: before 2.0
CVE-2021-37095
9.8
1%
Dec 7
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential…
Affected: before 2.0
CVE-2021-37084
9.8
1%
Dec 7
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart…
Affected: before 2.0
CVE-2021-37063
9.8
1%
Dec 7
There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices
Affected: before 2.0
CVE-2021-37059
9.8
1%
Dec 7
There is a Weaknesses Introduced During Design
Affected: before 2.0
CVE-2021-37022
9.8
1%
Nov 23
There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated
Affected: 2.0
CVE-2026-34865
9.1
0%
Apr 13
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality
Affected: 6.0.0
CVE-2025-31170
9.1
0%
Apr 7
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 4.0.0; 4.3.0; 5.0.0
CVE-2024-58127
9.1
0%
Apr 7
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 4.0.0; 4.3.0
CVE-2024-58126
9.1
0%
Apr 7
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 4.0.0; 4.3.0
CVE-2024-58125
9.1
0%
Apr 7
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 4.0.0; 4.3.0
CVE-2024-58124
9.1
0%
Apr 7
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 4.0.0
CVE-2024-57958
9.1
0%
Feb 6
Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 4.0.0; 4.2.0; 4.3.0; 5.0.0
CVE-2023-52953
9.1
0%
Jan 8
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 3.0.0; 2.0.0; 2.1.0
CVE-2024-45443
9.1
1%
Sep 4
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52538
9.1
0%
Apr 8
Vulnerability of package name verification being bypassed in the HwIms module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2024-30415
9.1
0%
Apr 7
Vulnerability of improper permission control in the window management module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52369
9.1
0%
Feb 18
Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52106
9.1
0%
Jan 16
Vulnerability of permission verification for APIs in the DownloadProviderMain module
Affected: 4.0.0
CVE-2023-52101
9.1
0%
Jan 16
Component exposure vulnerability in the Wi-Fi module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-5801
9.1
0%
Nov 8
Vulnerability of identity verification being bypassed in the face unlock module
Affected: 2.0.0; 3.0.0; 4.0.0
CVE-2023-44118
9.1
0%
Oct 11
Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality
Affected: 2.0.0; 3.0.0
CVE-2023-44107
9.1
0%
Oct 11
Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and…
Affected: 2.1.0
CVE-2023-41296
9.1
0%
Sep 25
Vulnerability of missing authorization in the kernel module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-39407
9.1
0%
Sep 25
The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity
Affected: 2.0.0
CVE-2023-39403
9.1
0%
Aug 13
Parameter verification vulnerability in the installd module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39402
9.1
0%
Aug 13
Parameter verification vulnerability in the installd module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
Page 2 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)