Huawei Harmonyos vulnerabilities

CVE-2022-31759 [MEDIUM] CWE-824 CVE-2022-31759: AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vul AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-22459 [MEDIUM] CWE-476 CVE-2021-22459: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may explo A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable.

CVE-2021-22295 [MEDIUM] CWE-276 CVE-2021-22295: A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page error OsVmPageFaultHandler.

CVE-2024-54101 [MEDIUM] CWE-20 CVE-2024-54101: Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-58286 [MEDIUM] CWE-25 CVE-2025-58286: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnera Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58292 [MEDIUM] CWE-27 CVE-2025-58292: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnera Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58290 [MEDIUM] CWE-41 CVE-2025-58290: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnera Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58291 [MEDIUM] CWE-29 CVE-2025-58291: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnera Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58289 [MEDIUM] CWE-840 CVE-2025-58289: Vulnerability of improper exception handling in the print module. Successful exploitation of this vu Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58288 [MEDIUM] CWE-275 CVE-2025-58288: Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnera Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58293 [MEDIUM] CWE-264 CVE-2025-58293: Vulnerability of improper exception handling in the print module. Successful exploitation of this vu Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

CVE-2025-54629 [MEDIUM] CWE-362 CVE-2025-54629: Race condition issue occurring in the physical page import process of the memory management module. Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-54651 [MEDIUM] CWE-362 CVE-2025-54651: Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vuln Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53173 [MEDIUM] CWE-121 CVE-2025-53173: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2026-41983 [MEDIUM] CWE-399 CVE-2026-41983: Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of thi Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-22441 [MEDIUM] CWE-190 CVE-2021-22441: Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnera Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.

CVE-2021-22471 [MEDIUM] CWE-476 CVE-2021-22471: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may explo A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.

CVE-2021-22462 [MEDIUM] CWE-476 CVE-2021-22462: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may explo A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

CVE-2021-22424 [MEDIUM] CWE-401 CVE-2021-22424: A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service.

CVE-2026-41977 [MEDIUM] CWE-190 CVE-2026-41977: DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affe DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.