Huawei Harmonyos vulnerabilities

CVE-2021-37067 [HIGH] CWE-200 CVE-2021-37067: There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartp There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality impacted.

CVE-2021-37003 [HIGH] CWE-20 CVE-2021-37003: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37017 [HIGH] CWE-20 CVE-2021-37017: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37024 [HIGH] CWE-20 CVE-2021-37024: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37008 [HIGH] CWE-20 CVE-2021-37008: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37025 [HIGH] CWE-20 CVE-2021-37025: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37019 [HIGH] CWE-20 CVE-2021-37019: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37005 [HIGH] CWE-20 CVE-2021-37005: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-37004 [HIGH] CWE-20 CVE-2021-37004: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

CVE-2021-39967 [HIGH] CWE-276 CVE-2021-39967: There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast per There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37044 [HIGH] CWE-281 CVE-2021-37044: There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-37043 [HIGH] CWE-287 CVE-2021-37043: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources.

CVE-2023-52713 [HIGH] CWE-862 CVE-2023-52713: Vulnerability of improper permission control in the window management module. Impact: Successful exp Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2023-52367 [HIGH] CWE-284 CVE-2023-52367: Vulnerability of improper access control in the media library module.Successful exploitation of this Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

CVE-2021-46814 [HIGH] CWE-125 CVE-2021-46814: The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-40047 [HIGH] CWE-401 CVE-2021-40047: There is a vulnerability of memory not being released after effective lifetime in the Bastet module. There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

CVE-2021-40038 [HIGH] CWE-415 CVE-2021-40038: There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of th There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-40039 [HIGH] CWE-476 CVE-2021-40039: There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful ex There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-40031 [HIGH] CWE-476 CVE-2021-40031: There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful ex There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-40028 [HIGH] CWE-787 CVE-2021-40028: The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulne The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.