Huawei Harmonyos vulnerabilities

CVE-2022-48509 [MEDIUM] CWE-476 CVE-2022-48509: Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Sh Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.

CVE-2026-81646 [MEDIUM] CWE-125 CVE-2026-81646: Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vul Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-81645 [MEDIUM] CWE-125 CVE-2026-81645: Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerabili Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.

CVE-2026-41968 [MEDIUM] CWE-840 CVE-2026-41968: Permission control vulnerability in the manufacturability design module. Impact: Successful exploita Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41967 [MEDIUM] CWE-840 CVE-2026-41967: Permission control vulnerability in the manufacturability design module. Impact: Successful exploita Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41961 [MEDIUM] CWE-840 CVE-2026-41961: Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34855 [MEDIUM] CWE-20 CVE-2026-34855: Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vuln Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2023-52721 [MEDIUM] CWE-264 CVE-2023-52721: The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.

CVE-2023-52719 [MEDIUM] CWE-16 CVE-2023-52719: Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-46584 [MEDIUM] CWE-280 CVE-2025-46584: Vulnerability of improper authentication logic implementation in the file system module Impact: Succ Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54652 [MEDIUM] CWE-22 CVE-2025-54652: Path traversal vulnerability in the virtualization base module. Successful exploitation of this vuln Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module.

CVE-2026-24923 [MEDIUM] CWE-264 CVE-2026-24923: Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerab Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-39671 [MEDIUM] CWE-840 CVE-2024-39671: Access control vulnerability in the security verification module. Impact: Successful exploitation of Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58043 [MEDIUM] CWE-840 CVE-2024-58043: Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnera Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-66319 [MEDIUM] CWE-264 CVE-2025-66319: Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2024-45444 [MEDIUM] CWE-20 CVE-2024-45444: Access permission verification vulnerability in the WMS module Impact: Successful exploitation of th Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45449 [MEDIUM] CWE-264 CVE-2024-45449: Access permission verification vulnerability in the ringtone setting module Impact: Successful explo Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49313 [MEDIUM] CWE-264 CVE-2026-49313: Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vul Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22460 [MEDIUM] CWE-345 CVE-2021-22460: A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Loc A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism.

CVE-2024-58050 [MEDIUM] CWE-276 CVE-2024-58050: Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of thi Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality.