Huawei Harmonyos vulnerabilities

CVE-2025-46591 [MEDIUM] CWE-602 CVE-2025-46591: Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-46593 [MEDIUM] CWE-400 CVE-2025-46593: Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploit Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-46586 [MEDIUM] CWE-862 CVE-2025-46586: Permission control vulnerability in the contacts module Impact: Successful exploitation of this vuln Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-46587 [MEDIUM] CWE-264 CVE-2025-46587: Permission control vulnerability in the media library module Impact: Successful exploitation of this Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-46592 [MEDIUM] CWE-476 CVE-2025-46592: Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58127 [CRITICAL] CWE-290 CVE-2024-58127: Access control vulnerability in the security verification module Impact: Successful exploitation of Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2025-31170 [CRITICAL] CWE-290 CVE-2025-31170: Access control vulnerability in the security verification module Impact: Successful exploitation of Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2024-58126 [CRITICAL] CWE-290 CVE-2024-58126: Access control vulnerability in the security verification module Impact: Successful exploitation of Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2024-58124 [CRITICAL] CWE-290 CVE-2024-58124: Access control vulnerability in the security verification module Impact: Successful exploitation of Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2024-58125 [CRITICAL] CWE-290 CVE-2024-58125: Access control vulnerability in the security verification module Impact: Successful exploitation of Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2024-58106 [HIGH] CWE-120 CVE-2024-58106: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerabil Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58111 [HIGH] CWE-248 CVE-2024-58111: Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Suc Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58115 [HIGH] CWE-121 CVE-2024-58115: Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful ex Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58108 [HIGH] CWE-120 CVE-2024-58108: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerabil Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58107 [HIGH] CWE-680 CVE-2024-58107: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerabil Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-31174 [HIGH] CWE-22 CVE-2025-31174: Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58116 [HIGH] CWE-121 CVE-2024-58116: Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful ex Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58113 [HIGH] CWE-399 CVE-2024-58113: Vulnerability of improper resource management in the memory management module Impact: Successful exp Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-31175 [HIGH] CWE-502 CVE-2025-31175: Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of thi Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2024-58110 [HIGH] CWE-120 CVE-2024-58110: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerabil Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.