Huawei Harmonyos vulnerabilities

CVE-2023-39387 [MEDIUM] CWE-264 CVE-2023-39387: Vulnerability of permission control in the window management module. Successful exploitation of this Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.

CVE-2022-48296 [MEDIUM] CWE-281 CVE-2022-48296: The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerabi The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information about external storage devices.

CVE-2023-52365 [MEDIUM] CWE-120 CVE-2023-52365: Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-52717 [MEDIUM] CWE-276 CVE-2023-52717: Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-54650 [MEDIUM] CWE-129 CVE-2025-54650: Improper array index verification vulnerability in the audio codec module. Impact: Successful exploi Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function.

CVE-2025-68963 [MEDIUM] CWE-521 CVE-2025-68963: Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-48354 [MEDIUM] CWE-787 CVE-2022-48354: The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this v The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.

CVE-2025-54623 [MEDIUM] CWE-680 CVE-2025-54623: Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of thi Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52385 [MEDIUM] CWE-20 CVE-2023-52385: Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulner Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2026-41987 [MEDIUM] CWE-264 CVE-2026-41987: Permission control vulnerability in the app management module. Impact: Successful exploitation of th Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54624 [MEDIUM] CWE-275 CVE-2025-54624: Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitat Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-31756 [MEDIUM] CVE-2022-31756: The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2021-22463 [MEDIUM] CWE-416 CVE-2021-22463: A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this v A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure.

CVE-2024-32996 [MEDIUM] CWE-264 CVE-2024-32996: Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vul Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2021-22467 [MEDIUM] CWE-20 CVE-2021-22467: A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may expl A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.

CVE-2021-22452 [MEDIUM] CWE-20 CVE-2021-22452: A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may expl A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.

CVE-2022-41590 [MEDIUM] CWE-287 CVE-2022-41590: Some smartphones have authentication-related (including session management) vulnerabilities as the s Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability.

CVE-2024-58252 [MEDIUM] CWE-200 CVE-2024-58252: Vulnerability of insufficient information protection in the media library module Impact: Successful Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-51528 [MEDIUM] CWE-532 CVE-2024-51528: Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitati Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24926 [MEDIUM] CWE-787 CVE-2026-24926: Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vuln Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.