Huawei Harmonyos vulnerabilities

CVE-2026-58555 [MEDIUM] CWE-264 CVE-2026-58555: Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerab Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52554 [MEDIUM] CWE-732 CVE-2023-52554: Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vu Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-31173 [MEDIUM] CWE-280 CVE-2025-31173: Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitat Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41975 [MEDIUM] CWE-701 CVE-2026-41975: Permission management vulnerability in the network management module. Impact: Successful exploitatio Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2022-48613 [MEDIUM] CWE-362 CVE-2022-48613: Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed.

CVE-2024-56441 [MEDIUM] CWE-362 CVE-2024-56441: Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-54102 [MEDIUM] CWE-362 CVE-2024-54102: Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41960 [MEDIUM] CWE-200 CVE-2026-41960: Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-37238 [MEDIUM] CWE-275 CVE-2023-37238: Vulnerability of apps' permission to access a certain API being incompletely verified in the wireles Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projection features.

CVE-2025-48908 [MEDIUM] CWE-567 CVE-2025-48908: Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-34741 [MEDIUM] CWE-120 CVE-2022-34741: The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability ma The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.

CVE-2022-34740 [MEDIUM] CWE-120 CVE-2022-34740: The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability ma The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.

CVE-2024-42030 [MEDIUM] CWE-701 CVE-2024-42030: Access permission verification vulnerability in the content sharing pop-up module Impact: Successful Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41969 [MEDIUM] CWE-275 CVE-2026-41969: Permission control vulnerability in the projection module. Impact: Successful exploitation of this v Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-48509 [MEDIUM] CWE-476 CVE-2022-48509: Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Sh Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.

CVE-2026-34850 [MEDIUM] CWE-362 CVE-2026-34850: Race condition vulnerability in the notification service. Impact: Successful exploitation of this vu Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-54120 [MEDIUM] CWE-362 CVE-2024-54120: Race condition vulnerability in the distributed notification module Impact: Successful exploitation Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2025-53168 [MEDIUM] CWE-275 CVE-2025-53168: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.

CVE-2025-54618 [MEDIUM] CWE-275 CVE-2025-54618: Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitatio Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-40009 [MEDIUM] CWE-787 CVE-2021-40009: There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitat There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.