Huawei Harmonyos vulnerabilities

CVE-2024-58113 [HIGH] CWE-399 CVE-2024-58113: Vulnerability of improper resource management in the memory management module Impact: Successful exp Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-46311 [HIGH] CWE-416 CVE-2022-46311: The contacts component has a free (undefined) provider vulnerability. Successful exploitation of thi The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity.

CVE-2023-52715 [HIGH] CWE-732 CVE-2023-52715: The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-30418 [HIGH] CWE-280 CVE-2024-30418: Vulnerability of insufficient permission verification in the app management module. Impact: Successf Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52116 [HIGH] CWE-269 CVE-2023-52116: Permission management vulnerability in the multi-screen interaction module. Successful exploitation Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.

CVE-2022-46312 [HIGH] CWE-285 CVE-2022-46312: The application management module has a vulnerability in permission verification. Successful exploit The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications.

CVE-2023-52097 [HIGH] CWE-200 CVE-2023-52097: Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploit Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-52099 [HIGH] CWE-284 CVE-2023-52099: Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploi Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-22253 [HIGH] CWE-354 CVE-2022-22253: The DFX module has a vulnerability of improper validation of integrity check values.Successful explo The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

CVE-2025-54630 [HIGH] CWE-122 CVE-2025-54630: :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploi :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-56437 [HIGH] CWE-20 CVE-2024-56437: Vulnerability of input parameters not being verified in the widget framework module Impact: Successf Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52375 [HIGH] CWE-284 CVE-2023-52375: Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.

CVE-2024-47293 [HIGH] CWE-130 CVE-2024-47293: Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vul Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52546 [HIGH] CWE-345 CVE-2023-52546: Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful ex Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-52109 [HIGH] CWE-345 CVE-2023-52109: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitat Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-34856 [HIGH] CWE-362 CVE-2026-34856: UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34851 [HIGH] CWE-362 CVE-2026-34851: Race condition vulnerability in the event notification module. Impact: Successful exploitation of th Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-29793 [HIGH] CVE-2022-29793: There is a configuration defect in the activation lock of mobile phones.Successful exploitation of t There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.

CVE-2021-40035 [HIGH] CWE-120 CVE-2021-40035: There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file m There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

CVE-2021-40029 [HIGH] CWE-120 CVE-2021-40029: There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file m There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.