Huawei Harmonyos vulnerabilities

CVE-2021-37098 [HIGH] CVE-2021-37098: Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vul Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.

CVE-2021-37061 [HIGH] CWE-400 CVE-2021-37061: There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitat There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service.

CVE-2021-37068 [HIGH] CVE-2021-37068: There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of Service Attacks.

CVE-2025-64315 [HIGH] CWE-264 CVE-2025-64315: Configuration defect vulnerability in the file management module. Impact: Successful exploitation of Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

CVE-2021-37083 [HIGH] CWE-476 CVE-2021-37083: There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of th There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks.

CVE-2024-42033 [HIGH] CWE-284 CVE-2024-42033: Access control vulnerability in the security verification module mpact: Successful exploitation of t Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2025-46585 [HIGH] CWE-787 CVE-2025-46585: Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52542 [MEDIUM] CWE-281 CVE-2023-52542: Permission verification vulnerability in the system module. Impact: Successful exploitation of this Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2022-48291 [MEDIUM] CWE-306 CVE-2022-48291: The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful e The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

CVE-2022-48358 [HIGH] CWE-601 CVE-2022-48358: The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerabi The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions.

CVE-2021-22326 [HIGH] CWE-269 CVE-2021-22326: A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attacke A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this vulnerability to obtain Kernel space read/write capability.

CVE-2022-41577 [HIGH] CWE-125 CVE-2022-41577: The kernel server has a vulnerability of not verifying the length of the data transferred in the use The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability.

CVE-2026-24915 [HIGH] CWE-125 CVE-2026-24915: Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerabili Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2026-34854 [HIGH] CWE-416 CVE-2026-34854: UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will a UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2025-46589 [HIGH] CWE-284 CVE-2025-46589: Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2025-58309 [HIGH] CWE-264 CVE-2025-58309: Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2025-58314 [HIGH] CWE-125 CVE-2025-58314: Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploit Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2026-24921 [HIGH] CWE-125 CVE-2026-24921: Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2026-41970 [MEDIUM] CWE-787 CVE-2026-41970: Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploita Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34852 [MEDIUM] CWE-835 CVE-2026-34852: Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerab Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.