Huawei Harmonyos vulnerabilities

CVE-2025-46593 [MEDIUM] CWE-400 CVE-2025-46593: Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploit Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-46592 [MEDIUM] CWE-476 CVE-2025-46592: Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54638 [MEDIUM] CWE-502 CVE-2025-54638: Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service.

CVE-2026-24917 [MEDIUM] CWE-416 CVE-2026-24917: UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-46586 [MEDIUM] CWE-862 CVE-2025-46586: Permission control vulnerability in the contacts module Impact: Successful exploitation of this vuln Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68964 [MEDIUM] CWE-20 CVE-2025-68964: Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulner Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58299 [MEDIUM] CWE-416 CVE-2025-58299: Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58281 [MEDIUM] CWE-125 CVE-2025-58281: Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58298 [MEDIUM] CWE-121 CVE-2025-58298: Data processing error vulnerability in the package management module. Successful exploitation of thi Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58312 [MEDIUM] CWE-264 CVE-2025-58312: Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vul Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66323 [MEDIUM] CWE-358 CVE-2025-66323: Vulnerability of improper criterion security check in the card module. Impact: Successful exploitati Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41984 [MEDIUM] CWE-284 CVE-2026-41984: UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerab UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2026-58552 [MEDIUM] CWE-120 CVE-2026-58552: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58551 [MEDIUM] CWE-120 CVE-2026-58551: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41985 [MEDIUM] CWE-284 CVE-2026-41985: UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerab UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-53178 [MEDIUM] CWE-264 CVE-2025-53178: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of th Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

CVE-2025-66327 [MEDIUM] CWE-362 CVE-2025-66327: Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerab Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-52380 [MEDIUM] CVE-2023-52380: Vulnerability of improper access control in the email module.Successful exploitation of this vulnera Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-31763 [MEDIUM] CWE-476 CVE-2022-31763: The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitat The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-22461 [MEDIUM] CWE-770 CVE-2021-22461: A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerabilit A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.