Huawei Harmonyos vulnerabilities

CVE-2025-54631 [MEDIUM] CWE-190 CVE-2025-54631: Vulnerability of insufficient data length verification in the partition module. Impact: Successful e Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28541 [MEDIUM] CWE-264 CVE-2026-28541: Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of thi Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66329 [MEDIUM] CWE-264 CVE-2025-66329: Permission control vulnerability in the window management module. Impact: Successful exploitation of Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34864 [MEDIUM] CWE-119 CVE-2026-34864: Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28538 [MEDIUM] CWE-24 CVE-2026-28538: Path traversal vulnerability in the certificate management module. Impact: Successful exploitation o Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34866 [MEDIUM] CWE-120 CVE-2026-34866: Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerab Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2022-48355 [MEDIUM] CWE-787 CVE-2022-48355: The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vu The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.

CVE-2021-22296 [MEDIUM] CVE-2021-22296: A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system.

CVE-2021-40037 [MEDIUM] CWE-843 CVE-2021-40037: There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the M There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

CVE-2022-31755 [MEDIUM] CWE-281 CVE-2022-31755: The communication module has a vulnerability of improper permission preservation. Successful exploit The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-22456 [MEDIUM] CVE-2021-22456: A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.

CVE-2021-22479 [MEDIUM] CWE-119 CVE-2021-22479: The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.

CVE-2021-22417 [MEDIUM] CVE-2021-22417: A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage.

CVE-2021-22465 [MEDIUM] CWE-787 CVE-2021-22465: A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exp A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.

CVE-2023-52383 [MEDIUM] CWE-415 CVE-2023-52383: Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability w Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52384 [MEDIUM] CWE-415 CVE-2023-52384: Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability w Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2021-22466 [MEDIUM] CWE-416 CVE-2021-22466: A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vu A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

CVE-2021-22454 [MEDIUM] CWE-668 CVE-2021-22454: A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump.

CVE-2021-22455 [MEDIUM] CWE-190 CVE-2021-22455: A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is not released.

CVE-2024-56452 [MEDIUM] CWE-120 CVE-2024-56452: Vulnerability of input parameters not being verified during glTF model loading in the 3D engine modu Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.