HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40017 | 9.8 | Sep 16 | The HW_KEYMASTER module lacks the validity check of the key format Affected: 2.0 |
| CVE-2022-37003 | 9.8 | Aug 9 | The AOD module has a vulnerability in permission assignment Affected: 2.0 |
| CVE-2022-37002 | 9.8 | Aug 9 | The SystemUI module has a privilege escalation vulnerability Affected: 2.0 |
| CVE-2021-40036 | 9.8 | Jun 13 | The bone voice ID TA has a memory overwrite vulnerability Affected: before 2.0 |
| CVE-2022-29794 | 9.8 | May 13 | The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality Affected: 2.0 |
| CVE-2021-46786 | 9.8 | May 13 | The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory… Affected: 2.0 |
| CVE-2022-22258 | 9.8 | Apr 11 | The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add… Affected: 2.0 |
| CVE-2021-40050 | 9.8 | Mar 10 | There is an out-of-bounds read vulnerability in the IFAA module Affected: 2.0 |
| CVE-2021-22480 | 9.8 | Feb 25 | The interface of a certain HarmonyOS module has an integer overflow vulnerability Affected: before 2.0 |
| CVE-2021-22434 | 9.8 | Feb 25 | There is a memory address out of bounds vulnerability in smartphones Affected: 2.0 |
| CVE-2021-22433 | 9.8 | Feb 25 | There is a memory address out of bounds in smartphones Affected: 2.0 |
| CVE-2021-22432 | 9.8 | Feb 25 | There is a vulnerability when configuring permission isolation in smartphones Affected: 2.0 |
| CVE-2021-22431 | 9.8 | Feb 25 | There is a vulnerability when configuring permission isolation in smartphones Affected: 2.0 |
| CVE-2021-22430 | 9.8 | Feb 25 | There is a logic bypass vulnerability in smartphones Affected: 2.0 |
| CVE-2021-22429 | 9.8 | Feb 25 | There is a memory address out of bounds in smartphones Affected: 2.0 |
| CVE-2021-22426 | 9.8 | Feb 25 | There is a memory address out of bounds in smartphones Affected: 2.0 |
| CVE-2021-40010 | 9.8 | Jan 10 | The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution Affected: 2.0 |
| CVE-2021-39996 | 9.8 | Jan 10 | There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones Affected: before 2.0 |
| CVE-2021-39990 | 9.8 | Jan 3 | The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience Affected: before 2.0 |
| CVE-2021-39979 | 9.8 | Jan 3 | HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity Affected: before 2.0 |
| CVE-2021-37128 | 9.8 | Jan 3 | HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file Affected: before 2.0 |
| CVE-2021-37049 | 9.8 | Dec 8 | There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects Affected: before 2.0 |
| CVE-2021-37045 | 9.8 | Dec 8 | There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be… Affected: before 2.0 |
| CVE-2021-37040 | 9.8 | Dec 8 | There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting Affected: before 2.0 |
| CVE-2021-37095 | 9.8 | Dec 7 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential… Affected: before 2.0 |
| CVE-2021-37084 | 9.8 | Dec 7 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart… Affected: before 2.0 |
| CVE-2021-37063 | 9.8 | Dec 7 | There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices Affected: before 2.0 |
| CVE-2021-37059 | 9.8 | Dec 7 | There is a Weaknesses Introduced During Design Affected: before 2.0 |
| CVE-2021-37022 | 9.8 | Nov 23 | There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated Affected: 2.0 |
| CVE-2026-34865 | 9.1 | Apr 13 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality Affected: 6.0.0 |
| CVE-2025-31170 | 9.1 | Apr 7 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 4.0.0; 4.3.0; 5.0.0 |
| CVE-2024-58127 | 9.1 | Apr 7 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 4.0.0; 4.3.0 |
| CVE-2024-58126 | 9.1 | Apr 7 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 4.0.0; 4.3.0 |
| CVE-2024-58125 | 9.1 | Apr 7 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 4.0.0; 4.3.0 |
| CVE-2024-58124 | 9.1 | Apr 7 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 4.0.0 |
| CVE-2024-57958 | 9.1 | Feb 6 | Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 4.0.0; 4.2.0; 4.3.0; 5.0.0 |
| CVE-2023-52953 | 9.1 | Jan 8 | Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 3.0.0; 2.0.0; 2.1.0 |
| CVE-2024-45443 | 9.1 | Sep 4 | Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2023-52538 | 9.1 | Apr 8 | Vulnerability of package name verification being bypassed in the HwIms module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2024-30415 | 9.1 | Apr 7 | Vulnerability of improper permission control in the window management module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52369 | 9.1 | Feb 18 | Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52106 | 9.1 | Jan 16 | Vulnerability of permission verification for APIs in the DownloadProviderMain module Affected: 4.0.0 |
| CVE-2023-52101 | 9.1 | Jan 16 | Component exposure vulnerability in the Wi-Fi module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-5801 | 9.1 | Nov 8 | Vulnerability of identity verification being bypassed in the face unlock module Affected: 2.0.0; 3.0.0; 4.0.0 |
| CVE-2023-44118 | 9.1 | Oct 11 | Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality Affected: 2.0.0; 3.0.0 |
| CVE-2023-44107 | 9.1 | Oct 11 | Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and… Affected: 2.1.0 |
| CVE-2023-41296 | 9.1 | Sep 25 | Vulnerability of missing authorization in the kernel module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-39407 | 9.1 | Sep 25 | The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity Affected: 2.0.0 |
| CVE-2023-39403 | 9.1 | Aug 13 | Parameter verification vulnerability in the installd module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39402 | 9.1 | Aug 13 | Parameter verification vulnerability in the installd module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
