Huawei Harmonyos vulnerabilities

CVE-2024-36500 [MEDIUM] CWE-269 CVE-2024-36500: Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54643 [MEDIUM] CWE-125 CVE-2025-54643: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-27521 [MEDIUM] CWE-280 CVE-2025-27521: Vulnerability of improper access permission in the process management module Impact: Successful expl Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54637 [MEDIUM] CWE-125 CVE-2025-54637: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45447 [MEDIUM] CWE-200 CVE-2024-45447: Access control vulnerability in the camera framework module Impact: Successful exploitation of this Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68966 [MEDIUM] CWE-200 CVE-2025-68966: Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vuln Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58302 [MEDIUM] CWE-264 CVE-2025-58302: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vul Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54644 [MEDIUM] CWE-125 CVE-2025-54644: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68965 [MEDIUM] CWE-200 CVE-2025-68965: Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vuln Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-66325 [MEDIUM] CWE-264 CVE-2025-66325: Permission control vulnerability in the package management module. Impact: Successful exploitation o Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58315 [MEDIUM] CWE-264 CVE-2025-58315: Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulner Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-64311 [MEDIUM] CWE-200 CVE-2025-64311: Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vuln Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58279 [MEDIUM] CWE-200 CVE-2025-58279: Permission control vulnerability in the media library module. Impact: Successful exploitation of thi Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-46785 [MEDIUM] CVE-2021-46785: The Property module has a vulnerability in permission control.This vulnerability can be exploited to The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.

CVE-2021-37132 [MEDIUM] CWE-276 CVE-2021-37132: PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful e PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission.

CVE-2021-46811 [MEDIUM] CWE-276 CVE-2021-46811: HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnera HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.

CVE-2021-37112 [MEDIUM] CWE-668 CVE-2021-37112: Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful ex Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.

CVE-2023-41312 [MEDIUM] CWE-269 CVE-2023-41312: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically.

CVE-2023-6273 [MEDIUM] CWE-276 CVE-2023-6273: Permission management vulnerability in the module for disabling Sound Booster. Successful exploitati Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-44102 [MEDIUM] CWE-668 CVE-2023-44102: Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this v Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.