Huawei Harmonyos vulnerabilities

CVE-2021-22424 [MEDIUM] CWE-401 CVE-2021-22424: A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service.

CVE-2021-22471 [MEDIUM] CWE-476 CVE-2021-22471: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may explo A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.

CVE-2021-22462 [MEDIUM] CWE-476 CVE-2021-22462: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may explo A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

CVE-2026-58557 [MEDIUM] CWE-701 CVE-2026-58557: Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerabilit Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-54122 [MEDIUM] CWE-362 CVE-2024-54122: Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of th Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51515 [MEDIUM] CWE-362 CVE-2024-51515: Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vul Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.

CVE-2026-28550 [MEDIUM] CWE-840 CVE-2026-28550: Race condition vulnerability in the security control module. Impact: Successful exploitation of this Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34849 [MEDIUM] CWE-362 CVE-2026-34849: UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerabi UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58296 [MEDIUM] CWE-362 CVE-2025-58296: Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2026-34861 [MEDIUM] CWE-362 CVE-2026-34861: Race condition vulnerability in the thermal management module. Impact: Successful exploitation of th Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28549 [MEDIUM] CWE-362 CVE-2026-28549: Race condition vulnerability in the permission management service. Impact: Successful exploitation o Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66328 [MEDIUM] CWE-362 CVE-2025-66328: Multi-thread race condition vulnerability in the network management module. Impact: Successful explo Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28551 [MEDIUM] CWE-362 CVE-2026-28551: Race condition vulnerability in the device security management module. Impact: Successful exploitati Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54632 [MEDIUM] CWE-120 CVE-2025-54632: Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploit Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-54633 [MEDIUM] CWE-125 CVE-2025-54633: Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41978 [MEDIUM] CWE-275 CVE-2026-41978: Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulner Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-44110 [MEDIUM] CWE-20 CVE-2023-44110: Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.

CVE-2021-22318 [MEDIUM] CWE-476 CVE-2021-22318: A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may e A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service.

CVE-2021-40015 [MEDIUM] CWE-362 CVE-2021-40015: There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful expl There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

CVE-2025-68957 [MEDIUM] CWE-362 CVE-2025-68957: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitat Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.