Huawei Harmonyos vulnerabilities

CVE-2021-37091 [HIGH] CVE-2021-37091: There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.

CVE-2021-37067 [HIGH] CWE-200 CVE-2021-37067: There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartp There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality impacted.

CVE-2021-37080 [HIGH] CWE-459 CVE-2021-37080: There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

CVE-2021-37048 [HIGH] CWE-20 CVE-2021-37048: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.

CVE-2021-37076 [HIGH] CWE-125 CVE-2021-37076: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

CVE-2021-37014 [HIGH] CWE-787 CVE-2021-37014: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to device cannot be used properly.

CVE-2021-37086 [HIGH] CWE-281 CVE-2021-37086: There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploi There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.

CVE-2021-37096 [HIGH] CWE-20 CVE-2021-37096: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.

CVE-2021-37100 [HIGH] CWE-287 CVE-2021-37100: There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of thi There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed.

CVE-2021-37057 [HIGH] CWE-129 CVE-2021-37057: There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploita There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone.

CVE-2021-37081 [HIGH] CWE-20 CVE-2021-37081: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of t There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.

CVE-2021-37068 [HIGH] CVE-2021-37068: There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of Service Attacks.

CVE-2021-37071 [HIGH] CVE-2021-37071: There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to persistent dos.

CVE-2021-37072 [HIGH] CWE-415 CVE-2021-37072: There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploi There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.

CVE-2021-37058 [MEDIUM] CVE-2021-37058: There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with.

CVE-2021-37082 [MEDIUM] CWE-362 CVE-2021-37082: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.

CVE-2021-37085 [MEDIUM] CWE-362 CVE-2021-37085: There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulner There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.

CVE-2021-37073 [LOW] CWE-362 CVE-2021-37073: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the detection result is tampered with.

CVE-2021-37016 [CRITICAL] CWE-125 CVE-2021-37016: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of Service.

CVE-2021-37022 [CRITICAL] CWE-787 CVE-2021-37022: There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated.