Huawei Harmonyos vulnerabilities

CVE-2026-24920 [MEDIUM] CWE-264 CVE-2026-24920: Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerab Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51512 [MEDIUM] CWE-20 CVE-2024-51512: Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploi Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51511 [MEDIUM] CWE-20 CVE-2024-51511: Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploi Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54620 [MEDIUM] CWE-502 CVE-2025-54620: Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitati Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-56450 [MEDIUM] CWE-120 CVE-2024-56450: Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-7271 [MEDIUM] CWE-840 CVE-2023-7271: Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-54642 [MEDIUM] CWE-20 CVE-2025-54642: Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Im Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54641 [MEDIUM] CWE-20 CVE-2025-54641: Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24925 [MEDIUM] CWE-122 CVE-2026-24925: Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of thi Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54636 [MEDIUM] CWE-20 CVE-2025-54636: Issue of buffer overflow caused by insufficient data verification in the kernel drop detection modul Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-39674 [MEDIUM] CWE-312 CVE-2024-39674: Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulner Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-58295 [MEDIUM] CWE-121 CVE-2025-58295: Buffer overflow vulnerability in the development framework module. Successful exploitation of this v Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58297 [MEDIUM] CWE-121 CVE-2025-58297: Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability m Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-54645 [MEDIUM] CWE-129 CVE-2025-54645: Out-of-bounds array access issue due to insufficient data verification in the location service modul Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28542 [MEDIUM] CWE-755 CVE-2026-28542: Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28547 [MEDIUM] CWE-824 CVE-2026-28547: Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitatio Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34863 [MEDIUM] CWE-787 CVE-2026-34863: Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulner Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41979 [MEDIUM] CWE-701 CVE-2026-41979: Permission control vulnerability in the print module. Impact: Successful exploitation of this vulner Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.

CVE-2021-39980 [MEDIUM] CWE-200 CVE-2021-39980: Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure.

CVE-2022-47974 [MEDIUM] CWE-287 CVE-2022-47974: The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart.