Huawei Harmonyos vulnerabilities

CVE-2026-28538 [MEDIUM] CWE-24 CVE-2026-28538: Path traversal vulnerability in the certificate management module. Impact: Successful exploitation o Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49303 [MEDIUM] CWE-264 CVE-2026-49303: Permission control vulnerability in the notification module. Impact: Successful exploitation of this Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34866 [MEDIUM] CWE-120 CVE-2026-34866: Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerab Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2022-48355 [MEDIUM] CWE-787 CVE-2022-48355: The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vu The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.

CVE-2021-22296 [MEDIUM] CVE-2021-22296: A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system.

CVE-2024-32999 [MEDIUM] CWE-840 CVE-2024-32999: Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerabili Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2021-40037 [MEDIUM] CWE-843 CVE-2021-40037: There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the M There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

CVE-2022-31755 [MEDIUM] CWE-281 CVE-2022-31755: The communication module has a vulnerability of improper permission preservation. Successful exploit The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-22456 [MEDIUM] CVE-2021-22456: A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.

CVE-2021-22479 [MEDIUM] CWE-119 CVE-2021-22479: The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.

CVE-2021-22465 [MEDIUM] CWE-787 CVE-2021-22465: A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exp A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.

CVE-2021-22466 [MEDIUM] CWE-416 CVE-2021-22466: A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vu A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

CVE-2021-22454 [MEDIUM] CWE-668 CVE-2021-22454: A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump.

CVE-2021-22455 [MEDIUM] CWE-190 CVE-2021-22455: A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is not released.

CVE-2021-22417 [MEDIUM] CVE-2021-22417: A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage.

CVE-2023-52383 [MEDIUM] CWE-415 CVE-2023-52383: Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability w Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52384 [MEDIUM] CWE-415 CVE-2023-52384: Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability w Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-56452 [MEDIUM] CWE-120 CVE-2024-56452: Vulnerability of input parameters not being verified during glTF model loading in the 3D engine modu Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24914 [MEDIUM] CWE-416 CVE-2026-24914: Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerabi Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-4046 [MEDIUM] CWE-840 CVE-2024-4046: Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerabili Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.