Huawei Harmonyos vulnerabilities

CVE-2025-54621 [LOW] CWE-664 CVE-2025-54621: Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerabilit Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures.

CVE-2025-54619 [LOW] CWE-664 CVE-2025-54619: Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulne Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability.

CVE-2025-53180 [HIGH] CWE-122 CVE-2025-53180: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53169 [HIGH] CWE-287 CVE-2025-53169: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.

CVE-2025-53181 [HIGH] CWE-122 CVE-2025-53181: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53167 [HIGH] CWE-305 CVE-2025-53167: Authentication vulnerability in the distributed collaboration framework module Impact: Successful ex Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53182 [HIGH] CWE-122 CVE-2025-53182: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53184 [HIGH] CWE-122 CVE-2025-53184: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53179 [HIGH] CWE-122 CVE-2025-53179: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53183 [HIGH] CWE-122 CVE-2025-53183: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53170 [MEDIUM] CWE-476 CVE-2025-53170: Null pointer dereference vulnerability in the application exit cause module Impact: Successful explo Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53168 [MEDIUM] CWE-275 CVE-2025-53168: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.

CVE-2025-53186 [MEDIUM] CWE-264 CVE-2025-53186: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-53173 [MEDIUM] CWE-121 CVE-2025-53173: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53178 [MEDIUM] CWE-264 CVE-2025-53178: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of th Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

CVE-2025-53185 [MEDIUM] CWE-416 CVE-2025-53185: Virtual address reuse issue in the memory management module, which can be exploited by non-privilege Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-53177 [LOW] CWE-264 CVE-2025-53177: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of th Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

CVE-2025-53175 [LOW] CWE-121 CVE-2025-53175: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53171 [LOW] CWE-121 CVE-2025-53171: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53172 [LOW] CWE-121 CVE-2025-53172: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.