Huawei Harmonyos vulnerabilities

CVE-2023-41311 [MEDIUM] CWE-284 CVE-2023-41311: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically.

CVE-2022-48361 [MEDIUM] CWE-22 CVE-2022-48361: The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitati The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources.

CVE-2023-52112 [MEDIUM] CWE-552 CVE-2023-52112: Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of t Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-46763 [MEDIUM] CWE-20 CVE-2023-46763: Vulnerability of background app permission management in the framework module. Successful exploitati Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously.

CVE-2022-46318 [MEDIUM] CVE-2022-46318: The HAware module has a function logic error. Successful exploitation of this vulnerability will aff The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings.

CVE-2023-41295 [MEDIUM] CWE-732 CVE-2023-41295: Vulnerability of improper permission management in the displayengine module. Successful exploitation Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim.

CVE-2023-52368 [MEDIUM] CWE-20 CVE-2023-52368: Input verification vulnerability in the account module.Successful exploitation of this vulnerability Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-52363 [MEDIUM] CVE-2023-52363: Vulnerability of defects introduced in the design process in the Control Panel module.Successful exp Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.

CVE-2025-54648 [MEDIUM] CWE-125 CVE-2025-54648: Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successf Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54647 [MEDIUM] CWE-125 CVE-2025-54647: Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successf Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49311 [MEDIUM] CWE-275 CVE-2026-49311: Permission control vulnerability in the event notification module.Impact: Successful exploitation of Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-42037 [MEDIUM] CWE-248 CVE-2024-42037: Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49305 [MEDIUM] CWE-755 CVE-2026-49305: Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49304 [MEDIUM] CWE-264 CVE-2026-49304: Permission control vulnerability in the device key management module. Impact: Successful exploitatio Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-37082 [MEDIUM] CWE-362 CVE-2021-37082: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.

CVE-2026-41973 [MEDIUM] CWE-840 CVE-2026-41973: Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-40001 [MEDIUM] CWE-22 CVE-2021-40001: The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.

CVE-2021-37013 [MEDIUM] CWE-20 CVE-2021-37013: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.

CVE-2024-47292 [MEDIUM] CWE-22 CVE-2024-47292: Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnera Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-51510 [MEDIUM] CWE-787 CVE-2024-51510: Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulner Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality.