Huawei Harmonyos vulnerabilities

CVE-2022-44563 [MEDIUM] CWE-362 CVE-2022-44563: There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerab There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2025-58305 [MEDIUM] CWE-200 CVE-2025-58305: Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-52554 [MEDIUM] CWE-732 CVE-2023-52554: Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vu Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-31173 [MEDIUM] CWE-280 CVE-2025-31173: Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitat Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41975 [MEDIUM] CWE-701 CVE-2026-41975: Permission management vulnerability in the network management module. Impact: Successful exploitatio Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2026-49307 [MEDIUM] CWE-200 CVE-2026-49307: Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49301 [MEDIUM] CWE-200 CVE-2026-49301: Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vuln Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-48613 [MEDIUM] CWE-362 CVE-2022-48613: Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed.

CVE-2024-56441 [MEDIUM] CWE-362 CVE-2024-56441: Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-54102 [MEDIUM] CWE-362 CVE-2024-54102: Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41960 [MEDIUM] CWE-200 CVE-2026-41960: Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58278 [MEDIUM] CWE-200 CVE-2025-58278: Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vul Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-81647 [MEDIUM] CWE-680 CVE-2026-81647: Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vul Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-37238 [MEDIUM] CWE-275 CVE-2023-37238: Vulnerability of apps' permission to access a certain API being incompletely verified in the wireles Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projection features.

CVE-2026-49315 [HIGH] CWE-264 CVE-2026-49315: DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-48908 [MEDIUM] CWE-567 CVE-2025-48908: Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-34741 [MEDIUM] CWE-120 CVE-2022-34741: The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability ma The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.

CVE-2022-34740 [MEDIUM] CWE-120 CVE-2022-34740: The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability ma The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.

CVE-2026-49302 [MEDIUM] CWE-200 CVE-2026-49302: Permission control vulnerability in the notification service module. Impact: Successful exploitation Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-42030 [MEDIUM] CWE-701 CVE-2024-42030: Access permission verification vulnerability in the content sharing pop-up module Impact: Successful Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.