HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54607 | 7.5 | Aug 6 | Authentication management vulnerability in the ArkWeb module Affected: 5.0.1; 5.0.2 |
| CVE-2025-53184 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53183 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53182 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53181 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53180 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53179 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53167 | 7.5 | Jul 7 | Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.1; 5.1.0 |
| CVE-2025-31175 | 7.5 | Apr 7 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2025-31174 | 7.5 | Apr 7 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-58116 | 7.5 | Apr 7 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58115 | 7.5 | Apr 7 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58113 | 7.5 | Apr 7 | Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58112 | 7.5 | Apr 7 | Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58111 | 7.5 | Apr 7 | Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58110 | 7.5 | Apr 7 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58109 | 7.5 | Apr 7 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58108 | 7.5 | Apr 7 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58107 | 7.5 | Apr 7 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58106 | 7.5 | Apr 7 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-57962 | 7.5 | Feb 6 | Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-57960 | 7.5 | Feb 6 | Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 3.0.0; 3.1.0; 4.0.0; 4.2.0; 4.3.0 |
| CVE-2024-57957 | 7.5 | Feb 6 | Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-57956 | 7.5 | Feb 6 | Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-57955 | 7.5 | Feb 6 | Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-57954 | 7.5 | Feb 6 | Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-12602 | 7.5 | Feb 6 | Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54121 | 7.5 | Jan 8 | Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 5.0.0 |
| CVE-2024-56449 | 7.5 | Jan 8 | Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2024-56448 | 7.5 | Jan 8 | Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2024-56447 | 7.5 | Jan 8 | Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2024-56446 | 7.5 | Jan 8 | Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-56444 | 7.5 | Jan 8 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-56443 | 7.5 | Jan 8 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-56442 | 7.5 | Jan 8 | Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 2.0.0; 3.1.0; 3.0.0; 2.1.0 |
| CVE-2024-56440 | 7.5 | Jan 8 | Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0 |
| CVE-2024-56439 | 7.5 | Jan 8 | Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-56438 | 7.5 | Jan 8 | Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability Affected: 4.2.0; 4.0.0; 3.1.0 |
| CVE-2024-56437 | 7.5 | Jan 8 | Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2023-52955 | 7.5 | Jan 8 | Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 2.0.0; 3.1.0; 3.0.0; 2.1.0 |
| CVE-2023-52954 | 7.5 | Jan 8 | Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability Affected: 2.0.0; 3.1.0; 3.0.0; 2.1.0 |
| CVE-2024-56436 | 7.5 | Jan 8 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-56435 | 7.5 | Jan 8 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-56434 | 7.5 | Jan 8 | UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device Affected: 4.2.0; 4.0.0 |
| CVE-2021-22484 | 7.5 | Dec 28 | Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data Affected: 2.0 |
| CVE-2024-54119 | 7.5 | Dec 12 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54117 | 7.5 | Dec 12 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54116 | 7.5 | Dec 12 | Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 5.0.0 |
| CVE-2024-54115 | 7.5 | Dec 12 | Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54114 | 7.5 | Dec 12 | Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)