Huawei Harmonyos vulnerabilities

CVE-2025-68958 [MEDIUM] CWE-362 CVE-2025-68958: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitat Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68956 [MEDIUM] CWE-362 CVE-2025-68956: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitat Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68955 [MEDIUM] CWE-362 CVE-2025-68955: Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploita Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68960 [MEDIUM] CWE-362 CVE-2025-68960: Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploita Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68961 [MEDIUM] CWE-362 CVE-2025-68961: Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploit Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54625 [MEDIUM] CWE-414 CVE-2025-54625: Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of th Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34862 [MEDIUM] CWE-362 CVE-2026-34862: Race condition vulnerability in the power consumption statistics module. Impact: Successful exploita Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68962 [MEDIUM] CWE-362 CVE-2025-68962: Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploit Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66326 [MEDIUM] CWE-416 CVE-2025-66326: Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68969 [MEDIUM] CWE-362 CVE-2025-68969: Multi-thread race condition vulnerability in the thermal management module. Impact: Successful explo Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66320 [MEDIUM] CWE-362 CVE-2025-66320: Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploit Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66321 [MEDIUM] CWE-362 CVE-2025-66321: Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploit Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66322 [MEDIUM] CWE-362 CVE-2025-66322: Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploit Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2021-40006 [MEDIUM] CWE-254 CVE-2021-40006: Vulnerability of design defects in the security algorithm component. Successful exploitation of this Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.

CVE-2025-54626 [MEDIUM] CWE-416 CVE-2025-54626: Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulne Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2026-24929 [MEDIUM] CWE-476 CVE-2026-24929: Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vul Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-44548 [MEDIUM] CWE-276 CVE-2022-44548: There is a vulnerability in permission verification during the Bluetooth pairing process. Successful There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

CVE-2025-54646 [MEDIUM] CWE-130 CVE-2025-54646: Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation o Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance.

CVE-2025-54608 [MEDIUM] CWE-264 CVE-2025-54608: Vulnerability that allows setting screen rotation direction without permission verification in the s Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.

CVE-2024-32997 [MEDIUM] CWE-362 CVE-2024-32997: Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vul Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.