Huawei Harmonyos vulnerabilities

CVE-2023-52365 [MEDIUM] CWE-120 CVE-2023-52365: Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-52368 [MEDIUM] CWE-20 CVE-2023-52368: Input verification vulnerability in the account module.Successful exploitation of this vulnerability Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-41295 [MEDIUM] CWE-732 CVE-2023-41295: Vulnerability of improper permission management in the displayengine module. Successful exploitation Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim.

CVE-2023-52363 [MEDIUM] CVE-2023-52363: Vulnerability of defects introduced in the design process in the Control Panel module.Successful exp Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.

CVE-2025-54650 [MEDIUM] CWE-129 CVE-2025-54650: Improper array index verification vulnerability in the audio codec module. Impact: Successful exploi Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function.

CVE-2024-42037 [MEDIUM] CWE-248 CVE-2024-42037: Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37082 [MEDIUM] CWE-362 CVE-2021-37082: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.

CVE-2021-40001 [MEDIUM] CWE-22 CVE-2021-40001: The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.

CVE-2024-47292 [MEDIUM] CWE-22 CVE-2024-47292: Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnera Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37013 [MEDIUM] CWE-20 CVE-2021-37013: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.

CVE-2024-51510 [MEDIUM] CWE-787 CVE-2024-51510: Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulner Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-51524 [MEDIUM] CWE-264 CVE-2024-51524: Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnera Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-51525 [MEDIUM] CWE-285 CVE-2024-51525: Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vul Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-54096 [MEDIUM] CWE-284 CVE-2024-54096: Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this v Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy.

CVE-2026-24924 [MEDIUM] CWE-264 CVE-2026-24924: Vulnerability of improper permission control in the print module. Impact: Successful exploitation of Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-31172 [MEDIUM] CWE-280 CVE-2025-31172: Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitat Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-51527 [MEDIUM] CWE-264 CVE-2024-51527: Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerab Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-46591 [MEDIUM] CWE-602 CVE-2025-46591: Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-31171 [MEDIUM] CWE-862 CVE-2025-31171: File read permission bypass vulnerability in the kernel file system module Impact: Successful exploi File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-51526 [MEDIUM] CWE-347 CVE-2024-51526: Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulne Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality.