Huawei Harmonyos vulnerabilities

CVE-2026-24927 [MEDIUM] CWE-416 CVE-2026-24927: Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitati Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-58046 [MEDIUM] CWE-840 CVE-2024-58046: Permission management vulnerability in the lock screen module Impact: Successful exploitation of thi Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58049 [MEDIUM] CWE-200 CVE-2024-58049: Permission verification vulnerability in the media library module Impact: Successful exploitation of Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58047 [MEDIUM] CWE-200 CVE-2024-58047: Permission verification vulnerability in the media library module Impact: Successful exploitation of Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53185 [MEDIUM] CWE-416 CVE-2025-53185: Virtual address reuse issue in the memory management module, which can be exploited by non-privilege Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-58295 [MEDIUM] CWE-121 CVE-2025-58295: Buffer overflow vulnerability in the development framework module. Successful exploitation of this v Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58277 [MEDIUM] CWE-200 CVE-2025-58277: Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vuln Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58297 [MEDIUM] CWE-121 CVE-2025-58297: Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability m Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.

CVE-2026-24922 [MEDIUM] CWE-122 CVE-2026-24922: Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerabili Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28546 [MEDIUM] CWE-122 CVE-2026-28546: Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulner Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66330 [MEDIUM] CWE-200 CVE-2025-66330: App lock verification bypass vulnerability in the file management app. Impact: Successful exploitati App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-66324 [MEDIUM] CWE-269 CVE-2025-66324: Input verification vulnerability in the compression and decompression module. Impact: Successful exp Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity.

CVE-2026-28539 [MEDIUM] CWE-19 CVE-2026-28539: Data processing vulnerability in the certificate management module. Impact: Successful exploitation Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37118 [MEDIUM] CWE-755 CVE-2021-37118: The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful e The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.

CVE-2023-34160 [MEDIUM] CWE-290 CVE-2023-34160: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

CVE-2023-34158 [MEDIUM] CWE-290 CVE-2023-34158: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

CVE-2023-34167 [MEDIUM] CWE-290 CVE-2023-34167: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

CVE-2023-52551 [MEDIUM] CWE-120 CVE-2023-52551: Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of t Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37039 [MEDIUM] CWE-20 CVE-2021-37039: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.

CVE-2023-52358 [MEDIUM] CVE-2023-52358: Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of t Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.