Huawei Harmonyos vulnerabilities

CVE-2026-41969 [MEDIUM] CWE-275 CVE-2026-41969: Permission control vulnerability in the projection module. Impact: Successful exploitation of this v Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-34850 [MEDIUM] CWE-362 CVE-2026-34850: Race condition vulnerability in the notification service. Impact: Successful exploitation of this vu Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-54120 [MEDIUM] CWE-362 CVE-2024-54120: Race condition vulnerability in the distributed notification module Impact: Successful exploitation Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2025-53168 [MEDIUM] CWE-275 CVE-2025-53168: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.

CVE-2025-54618 [MEDIUM] CWE-275 CVE-2025-54618: Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitatio Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-40009 [MEDIUM] CWE-787 CVE-2021-40009: There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitat There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-40003 [MEDIUM] CWE-22 CVE-2021-40003: HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2025-48910 [MEDIUM] CWE-122 CVE-2025-48910: Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerabil Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24928 [MEDIUM] CWE-680 CVE-2026-24928: Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68959 [MEDIUM] CWE-200 CVE-2025-68959: Permission verification bypass vulnerability in the media library module. Impact: Successful exploit Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68970 [MEDIUM] CWE-20 CVE-2025-68970: Permission verification bypass vulnerability in the media library module. Impact: Successful exploit Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-46313 [MEDIUM] CWE-287 CVE-2022-46313: The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulne The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone.

CVE-2023-0117 [MEDIUM] CWE-287 CVE-2023-0117: The online authentication provided by the hwKitAssistant lacks strict identity verification of appli The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as MeeTime.

CVE-2026-41972 [MEDIUM] CWE-22 CVE-2026-41972: Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability m Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-48491 [MEDIUM] CWE-862 CVE-2022-48491: Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vul Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.

CVE-2023-34165 [MEDIUM] CWE-862 CVE-2023-34165: Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful expl Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions.

CVE-2026-41981 [MEDIUM] CWE-122 CVE-2026-41981: Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnera Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-48293 [MEDIUM] CWE-125 CVE-2022-48293: The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may aff The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-48292 [MEDIUM] CWE-125 CVE-2022-48292: The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulne The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-39006 [MEDIUM] CWE-362 CVE-2022-39006: The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.