Huawei Harmonyos vulnerabilities

CVE-2026-24919 [MEDIUM] CWE-787 CVE-2026-24919: Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnera Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24931 [MEDIUM] CWE-264 CVE-2026-24931: Vulnerability of improper criterion security check in the card module. Impact: Successful exploitati Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54615 [MEDIUM] CWE-200 CVE-2025-54615: Vulnerability of insufficient information protection in the media library module. Impact: Successful Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24927 [MEDIUM] CWE-416 CVE-2026-24927: Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitati Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51530 [MEDIUM] CWE-20 CVE-2024-51530: LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerabi LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-42034 [MEDIUM] CWE-840 CVE-2024-42034: LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerab LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-8298 [MEDIUM] CWE-701 CVE-2024-8298: Memory request vulnerability in the memory management module Impact: Successful exploitation of this Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-36501 [MEDIUM] CWE-787 CVE-2024-36501: Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulne Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.

CVE-2025-54611 [MEDIUM] CWE-840 CVE-2025-54611: EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-42032 [MEDIUM] CWE-285 CVE-2024-42032: Access permission verification vulnerability in the Contacts module Impact: Successful exploitation Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-39670 [MEDIUM] CWE-264 CVE-2024-39670: Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploit Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-58046 [MEDIUM] CWE-840 CVE-2024-58046: Permission management vulnerability in the lock screen module Impact: Successful exploitation of thi Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-36499 [MEDIUM] CWE-269 CVE-2024-36499: Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58049 [MEDIUM] CWE-200 CVE-2024-58049: Permission verification vulnerability in the media library module Impact: Successful exploitation of Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58047 [MEDIUM] CWE-200 CVE-2024-58047: Permission verification vulnerability in the media library module Impact: Successful exploitation of Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24922 [MEDIUM] CWE-122 CVE-2026-24922: Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerabili Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-53185 [MEDIUM] CWE-416 CVE-2025-53185: Virtual address reuse issue in the memory management module, which can be exploited by non-privilege Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-58287 [MEDIUM] CWE-275 CVE-2025-58287: Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerabil Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-58301 [MEDIUM] CWE-121 CVE-2025-58301: Buffer overflow vulnerability in the device management module. Successful exploitation of this vulne Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58277 [MEDIUM] CWE-200 CVE-2025-58277: Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vuln Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.