Huawei Harmonyos vulnerabilities

CVE-2025-58281 [MEDIUM] CWE-125 CVE-2025-58281: Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66323 [MEDIUM] CWE-358 CVE-2025-66323: Vulnerability of improper criterion security check in the card module. Impact: Successful exploitati Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58312 [MEDIUM] CWE-264 CVE-2025-58312: Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vul Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58552 [MEDIUM] CWE-120 CVE-2026-58552: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58551 [MEDIUM] CWE-120 CVE-2026-58551: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53178 [MEDIUM] CWE-264 CVE-2025-53178: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of th Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

CVE-2025-66327 [MEDIUM] CWE-362 CVE-2025-66327: Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerab Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-52380 [MEDIUM] CVE-2023-52380: Vulnerability of improper access control in the email module.Successful exploitation of this vulnera Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-31763 [MEDIUM] CWE-476 CVE-2022-31763: The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitat The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-22461 [MEDIUM] CWE-770 CVE-2021-22461: A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerabilit A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.

CVE-2021-22450 [MEDIUM] CWE-459 CVE-2021-22450: A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit thi A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to cause memory exhaustion.

CVE-2024-36502 [MEDIUM] CWE-125 CVE-2024-36502: Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnera Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-46593 [MEDIUM] CWE-400 CVE-2025-46593: Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploit Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51513 [MEDIUM] CWE-400 CVE-2024-51513: Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitat Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption.

CVE-2024-56451 [MEDIUM] CWE-680 CVE-2024-56451: Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51514 [MEDIUM] CWE-20 CVE-2024-51514: Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitati Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45445 [MEDIUM] CWE-459 CVE-2024-45445: Vulnerability of resources not being closed or released in the keystore module Impact: Successful ex Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-53170 [MEDIUM] CWE-476 CVE-2025-53170: Null pointer dereference vulnerability in the application exit cause module Impact: Successful explo Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-58299 [MEDIUM] CWE-416 CVE-2025-58299: Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-54634 [MEDIUM] CWE-755 CVE-2025-54634: Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Success Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability.