Huawei Harmonyos vulnerabilities

1,076 known vulnerabilities affecting huawei/harmonyos.

Total CVEs
1,076
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL138HIGH534MEDIUM365LOW39

Vulnerabilities

Page 18 of 54
CVE-2024-47294HIGHCVSS 7.5v2.0.0v2.1.0+4 more2024-09-27
CVE-2024-47294 [HIGH] CWE-16 CVE-2024-47294: Access permission verification vulnerability in the input method framework module Impact: Successful Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
cvelistv5nvd
CVE-2024-47293HIGHCVSS 7.5v3.0.0v4.0.0+1 more2024-09-27
CVE-2024-47293 [HIGH] CWE-130 CVE-2024-47293: Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vul Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.
cvelistv5nvd
CVE-2024-47292MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-09-27
CVE-2024-47292 [MEDIUM] CWE-22 CVE-2024-47292: Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnera Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-47291MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-09-27
CVE-2024-47291 [MEDIUM] CWE-16 CVE-2024-47291: Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.
cvelistv5nvd
CVE-2024-47290MEDIUMCVSS 5.5v2.0.0v2.1.0+3 more2024-09-27
CVE-2024-47290 [MEDIUM] CWE-476 CVE-2024-47290: Input validation vulnerability in the USB service module Impact: Successful exploitation of this vul Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability.
cvelistv5nvd
CVE-2024-45443CRITICALCVSS 9.1v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45443 [CRITICAL] CWE-22 CVE-2024-45443: Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnera Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
cvelistv5nvd
CVE-2024-45441HIGHCVSS 7.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45441 [HIGH] CWE-20 CVE-2024-45441: Input verification vulnerability in the system service module Impact: Successful exploitation of thi Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.
cvelistv5nvd
CVE-2024-45442HIGHCVSS 7.5v3.1.0v4.0.0+1 more2024-09-04
CVE-2024-45442 [HIGH] CWE-264 CVE-2024-45442: Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Success Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.
cvelistv5nvd
CVE-2024-45450HIGHCVSS 7.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45450 [HIGH] CWE-200 CVE-2024-45450: Permission control vulnerability in the software update module. Impact: Successful exploitation of t Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-42039HIGHCVSS 7.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-42039 [HIGH] CWE-285 CVE-2024-42039: Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerab Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-45447MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45447 [MEDIUM] CWE-200 CVE-2024-45447: Access control vulnerability in the camera framework module Impact: Successful exploitation of this Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-45449MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45449 [MEDIUM] CWE-264 CVE-2024-45449: Access permission verification vulnerability in the ringtone setting module Impact: Successful explo Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-45444MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45444 [MEDIUM] CWE-20 CVE-2024-45444: Access permission verification vulnerability in the WMS module Impact: Successful exploitation of th Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-45445MEDIUMCVSS 5.5v3.0.0v3.1.0+2 more2024-09-04
CVE-2024-45445 [MEDIUM] CWE-459 CVE-2024-45445: Vulnerability of resources not being closed or released in the keystore module Impact: Successful ex Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability.
cvelistv5nvd
CVE-2024-45448MEDIUMCVSS 5.5v4.0.0v4.2.0+1 more2024-09-04
CVE-2024-45448 [MEDIUM] CWE-1259 CVE-2024-45448: Page table protection configuration vulnerability in the trusted firmware module Impact: Successful Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-45446MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-09-04
CVE-2024-45446 [MEDIUM] CWE-20 CVE-2024-45446: Access permission verification vulnerability in the camera driver module Impact: Successful exploita Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability.
cvelistv5nvd
CVE-2024-8298MEDIUMCVSS 5.5v4.0.0v4.2.02024-09-04
CVE-2024-8298 [MEDIUM] CWE-701 CVE-2024-8298: Memory request vulnerability in the memory management module Impact: Successful exploitation of this Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-42035HIGHCVSS 7.8v4.0.0v4.2.02024-08-08
CVE-2024-42035 [HIGH] CWE-862 CVE-2024-42035: Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.
cvelistv5nvd
CVE-2024-42036HIGHCVSS 7.5v3.0.0v3.1.0+2 more2024-08-08
CVE-2024-42036 [HIGH] CWE-285 CVE-2024-42036: Access permission verification vulnerability in the Notepad module Impact: Successful exploitation o Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
cvelistv5nvd
CVE-2024-42033HIGHCVSS 7.1v2.0.0v3.0.0+3 more2024-08-08
CVE-2024-42033 [HIGH] CWE-284 CVE-2024-42033: Access control vulnerability in the security verification module mpact: Successful exploitation of t Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
cvelistv5nvd