Huawei Harmonyos vulnerabilities

CVE-2024-58112 [HIGH] CWE-248 CVE-2024-58112: Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Suc Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52545 [HIGH] CWE-276 CVE-2023-52545: Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-54113 [HIGH] CWE-400 CVE-2024-54113: Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploit Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption.

CVE-2024-54115 [HIGH] CWE-754 CVE-2024-54115: Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerab Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-57956 [HIGH] CWE-680 CVE-2024-57956: Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-53180 [HIGH] CWE-122 CVE-2025-53180: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53181 [HIGH] CWE-122 CVE-2025-53181: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53182 [HIGH] CWE-122 CVE-2025-53182: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53184 [HIGH] CWE-122 CVE-2025-53184: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53183 [HIGH] CWE-122 CVE-2025-53183: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-53179 [HIGH] CWE-122 CVE-2025-53179: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2024-56438 [HIGH] CWE-119 CVE-2024-56438: Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitati Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-56442 [HIGH] CWE-227 CVE-2024-56442: Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful expl Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2024-57962 [HIGH] CWE-701 CVE-2024-57962: Vulnerability of incomplete verification information in the VPN service module Impact: Successful ex Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-48911 [HIGH] CWE-266 CVE-2025-48911: Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploi Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-22252 [HIGH] CWE-416 CVE-2022-22252: The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect syst The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.

CVE-2021-37111 [HIGH] CWE-770 CVE-2021-37111: There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.

CVE-2021-37119 [HIGH] CVE-2021-37119: There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability m There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

CVE-2021-37117 [HIGH] CVE-2021-37117: There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability m There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

CVE-2021-37053 [HIGH] CVE-2021-37053: There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerab There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.