Huawei Harmonyos vulnerabilities

CVE-2023-52721 [MEDIUM] CWE-264 CVE-2023-52721: The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.

CVE-2023-52719 [MEDIUM] CWE-16 CVE-2023-52719: Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-46584 [MEDIUM] CWE-280 CVE-2025-46584: Vulnerability of improper authentication logic implementation in the file system module Impact: Succ Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-39671 [MEDIUM] CWE-840 CVE-2024-39671: Access control vulnerability in the security verification module. Impact: Successful exploitation of Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54652 [MEDIUM] CWE-22 CVE-2025-54652: Path traversal vulnerability in the virtualization base module. Successful exploitation of this vuln Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module.

CVE-2024-45444 [MEDIUM] CWE-20 CVE-2024-45444: Access permission verification vulnerability in the WMS module Impact: Successful exploitation of th Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58043 [MEDIUM] CWE-840 CVE-2024-58043: Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnera Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45449 [MEDIUM] CWE-264 CVE-2024-45449: Access permission verification vulnerability in the ringtone setting module Impact: Successful explo Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24923 [MEDIUM] CWE-264 CVE-2026-24923: Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerab Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-66319 [MEDIUM] CWE-264 CVE-2025-66319: Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2024-36500 [MEDIUM] CWE-269 CVE-2024-36500: Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22460 [MEDIUM] CWE-345 CVE-2021-22460: A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Loc A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism.

CVE-2024-58050 [MEDIUM] CWE-276 CVE-2024-58050: Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of thi Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-27521 [MEDIUM] CWE-280 CVE-2025-27521: Vulnerability of improper access permission in the process management module Impact: Successful expl Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45447 [MEDIUM] CWE-200 CVE-2024-45447: Access control vulnerability in the camera framework module Impact: Successful exploitation of this Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54643 [MEDIUM] CWE-125 CVE-2025-54643: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58302 [MEDIUM] CWE-264 CVE-2025-58302: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vul Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54637 [MEDIUM] CWE-125 CVE-2025-54637: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58294 [MEDIUM] CWE-264 CVE-2025-58294: Permission control vulnerability in the print module. Impact: Successful exploitation of this vulner Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58315 [MEDIUM] CWE-264 CVE-2025-58315: Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulner Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.