Huawei Harmonyos vulnerabilities

CVE-2024-54122 [MEDIUM] CWE-362 CVE-2024-54122: Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of th Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-51515 [MEDIUM] CWE-362 CVE-2024-51515: Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vul Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.

CVE-2026-28550 [MEDIUM] CWE-840 CVE-2026-28550: Race condition vulnerability in the security control module. Impact: Successful exploitation of this Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34849 [MEDIUM] CWE-362 CVE-2026-34849: UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerabi UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58296 [MEDIUM] CWE-362 CVE-2025-58296: Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-66328 [MEDIUM] CWE-362 CVE-2025-66328: Multi-thread race condition vulnerability in the network management module. Impact: Successful explo Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28551 [MEDIUM] CWE-362 CVE-2026-28551: Race condition vulnerability in the device security management module. Impact: Successful exploitati Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34861 [MEDIUM] CWE-362 CVE-2026-34861: Race condition vulnerability in the thermal management module. Impact: Successful exploitation of th Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-28549 [MEDIUM] CWE-362 CVE-2026-28549: Race condition vulnerability in the permission management service. Impact: Successful exploitation o Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54633 [MEDIUM] CWE-125 CVE-2025-54633: Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41978 [MEDIUM] CWE-275 CVE-2026-41978: Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulner Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-81644 [MEDIUM] CWE-264 CVE-2026-81644: DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerabili DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-44548 [MEDIUM] CWE-276 CVE-2022-44548: There is a vulnerability in permission verification during the Bluetooth pairing process. Successful There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

CVE-2021-22318 [MEDIUM] CWE-476 CVE-2021-22318: A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may e A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service.

CVE-2026-58557 [MEDIUM] CWE-701 CVE-2026-58557: Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerabilit Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-40015 [MEDIUM] CWE-362 CVE-2021-40015: There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful expl There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

CVE-2025-68957 [MEDIUM] CWE-362 CVE-2025-68957: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitat Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68958 [MEDIUM] CWE-362 CVE-2025-68958: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitat Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68956 [MEDIUM] CWE-362 CVE-2025-68956: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitat Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68955 [MEDIUM] CWE-362 CVE-2025-68955: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploita Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.