Huawei Harmonyos vulnerabilities

CVE-2022-34736 [HIGH] CWE-476 CVE-2022-34736: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2021-39998 [HIGH] CVE-2021-39998: There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExServi There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

CVE-2021-37077 [HIGH] CWE-476 CVE-2021-37077: There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of th There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash.

CVE-2021-37057 [HIGH] CWE-129 CVE-2021-37057: There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploita There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone.

CVE-2022-34743 [HIGH] CWE-125 CVE-2022-34743: The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-39977 [HIGH] CWE-476 CVE-2021-39977: The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

CVE-2021-39985 [HIGH] CWE-129 CVE-2021-39985: The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitati The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

CVE-2021-39989 [HIGH] CWE-704 CVE-2021-39989: The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerabili The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

CVE-2021-39988 [HIGH] CWE-476 CVE-2021-39988: The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

CVE-2021-37094 [HIGH] CWE-20 CVE-2021-37094: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service.

CVE-2021-37081 [HIGH] CWE-20 CVE-2021-37081: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.

CVE-2022-22261 [HIGH] CVE-2022-22261: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Success The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.

CVE-2022-29796 [HIGH] CVE-2022-29796: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Success The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.

CVE-2022-29791 [HIGH] CVE-2022-29791: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Success The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.

CVE-2022-29789 [HIGH] CVE-2022-29789: The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Suc The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.

CVE-2022-29795 [HIGH] CWE-476 CVE-2022-29795: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2021-22489 [HIGH] CVE-2021-22489: There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affec There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability.

CVE-2022-31753 [HIGH] CWE-134 CVE-2022-31753: The voice wakeup module has a vulnerability of using externally-controlled format strings. Successfu The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-37004 [HIGH] CVE-2022-37004: The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successf The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability.

CVE-2022-37007 [HIGH] CWE-125 CVE-2022-37007: The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnera The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.