Huawei Harmonyos vulnerabilities

CVE-2023-52543 [MEDIUM] CWE-269 CVE-2023-52543: Permission verification vulnerability in the system module. Impact: Successful exploitation of this Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-53186 [MEDIUM] CWE-264 CVE-2025-53186: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-37085 [MEDIUM] CWE-362 CVE-2021-37085: There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulner There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.

CVE-2026-34867 [MEDIUM] CWE-415 CVE-2026-34867: Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vu Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24918 [MEDIUM] CWE-476 CVE-2026-24918: Address read vulnerability in the communication module. Impact: Successful exploitation of this vuln Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51512 [MEDIUM] CWE-20 CVE-2024-51512: Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploi Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51511 [MEDIUM] CWE-20 CVE-2024-51511: Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploi Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-56450 [MEDIUM] CWE-120 CVE-2024-56450: Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-7271 [MEDIUM] CWE-840 CVE-2023-7271: Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-54620 [MEDIUM] CWE-502 CVE-2025-54620: Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitati Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24926 [MEDIUM] CWE-787 CVE-2026-24926: Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vuln Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24920 [MEDIUM] CWE-264 CVE-2026-24920: Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerab Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54642 [MEDIUM] CWE-20 CVE-2025-54642: Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Im Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54641 [MEDIUM] CWE-20 CVE-2025-54641: Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-39674 [MEDIUM] CWE-312 CVE-2024-39674: Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulner Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-54636 [MEDIUM] CWE-20 CVE-2025-54636: Issue of buffer overflow caused by insufficient data verification in the kernel drop detection modul Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54645 [MEDIUM] CWE-129 CVE-2025-54645: Out-of-bounds array access issue due to insufficient data verification in the location service modul Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24925 [MEDIUM] CWE-122 CVE-2026-24925: Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of thi Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34863 [MEDIUM] CWE-787 CVE-2026-34863: Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulner Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28542 [MEDIUM] CWE-755 CVE-2026-28542: Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.