Huawei Harmonyos vulnerabilities

CVE-2025-58300 [MEDIUM] CWE-121 CVE-2025-58300: Buffer overflow vulnerability in the device management module. Successful exploitation of this vulne Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-66330 [MEDIUM] CWE-200 CVE-2025-66330: App lock verification bypass vulnerability in the file management app. Impact: Successful exploitati App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-66324 [MEDIUM] CWE-269 CVE-2025-66324: Input verification vulnerability in the compression and decompression module. Impact: Successful exp Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity.

CVE-2026-41980 [MEDIUM] CWE-200 CVE-2026-41980: Permission control vulnerability in the file preview module. Impact: Successful exploitation of this Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-28546 [MEDIUM] CWE-122 CVE-2026-28546: Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulner Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28539 [MEDIUM] CWE-19 CVE-2026-28539: Data processing vulnerability in the certificate management module. Impact: Successful exploitation Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37118 [MEDIUM] CWE-755 CVE-2021-37118: The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful e The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.

CVE-2023-34160 [MEDIUM] CWE-290 CVE-2023-34160: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

CVE-2023-34158 [MEDIUM] CWE-290 CVE-2023-34158: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

CVE-2023-34167 [MEDIUM] CWE-290 CVE-2023-34167: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

CVE-2023-52551 [MEDIUM] CWE-120 CVE-2023-52551: Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of t Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-48902 [MEDIUM] CWE-118 CVE-2025-48902: Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-37039 [MEDIUM] CWE-20 CVE-2021-37039: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.

CVE-2023-52543 [MEDIUM] CWE-269 CVE-2023-52543: Permission verification vulnerability in the system module. Impact: Successful exploitation of this Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-48907 [MEDIUM] CWE-248 CVE-2025-48907: Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerabilit Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-53186 [MEDIUM] CWE-264 CVE-2025-53186: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-48904 [MEDIUM] CWE-288 CVE-2025-48904: Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitati Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-37085 [MEDIUM] CWE-362 CVE-2021-37085: There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulner There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.

CVE-2026-34867 [MEDIUM] CWE-415 CVE-2026-34867: Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vu Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24918 [MEDIUM] CWE-476 CVE-2026-24918: Address read vulnerability in the communication module. Impact: Successful exploitation of this vuln Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.