Huawei Harmonyos vulnerabilities

CVE-2023-39392 [HIGH] CWE-16 CVE-2023-39392: Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnera Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

CVE-2025-54628 [HIGH] CWE-118 CVE-2025-54628: Vulnerability of incomplete verification information in the communication module. Impact: Successful Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-54108 [HIGH] CWE-125 CVE-2024-54108: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulner Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-54116 [HIGH] CWE-754 CVE-2024-54116: Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerab Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2024-54107 [HIGH] CWE-125 CVE-2024-54107: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulner Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-45441 [HIGH] CWE-20 CVE-2024-45441: Input verification vulnerability in the system service module Impact: Successful exploitation of thi Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-56446 [HIGH] CWE-457 CVE-2024-56446: Vulnerability of variables not being initialized in the notification module Impact: Successful explo Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-54105 [HIGH] CWE-120 CVE-2024-54105: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulner Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-45442 [HIGH] CWE-264 CVE-2024-45442: Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Success Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-54098 [HIGH] CWE-840 CVE-2024-54098: Service logic error vulnerability in the system service module Impact: Successful exploitation of th Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-54635 [HIGH] CWE-416 CVE-2025-54635: Vulnerability of returning released pointers in the distributed notification service. Impact: Succes Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-54111 [HIGH] CWE-345 CVE-2024-54111: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulner Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52553 [HIGH] CWE-362 CVE-2023-52553: Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2022-41585 [HIGH] CWE-125 CVE-2022-41585: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2022-41584 [HIGH] CWE-125 CVE-2022-41584: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2021-37078 [HIGH] CWE-755 CVE-2021-37078: There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote Denial of Service.

CVE-2021-40052 [HIGH] CWE-131 CVE-2021-40052: There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploi There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.

CVE-2021-40048 [HIGH] CWE-131 CVE-2021-40048: There is an incorrect buffer size calculation vulnerability in the video framework. Successful explo There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.

CVE-2021-39973 [HIGH] CWE-476 CVE-2021-39973: There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

CVE-2022-34735 [HIGH] CWE-476 CVE-2022-34735: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.