Huawei Harmonyos vulnerabilities

CVE-2026-41963 [LOW] CWE-121 CVE-2026-41963: Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerab Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-41598 [LOW] CWE-125 CVE-2022-41598: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41595 [LOW] CWE-125 CVE-2022-41595: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41597 [LOW] CWE-125 CVE-2022-41597: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41592 [LOW] CWE-125 CVE-2022-41592: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41600 [LOW] CWE-125 CVE-2022-41600: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41601 [LOW] CWE-125 CVE-2022-41601: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41603 [LOW] CWE-125 CVE-2022-41603: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41602 [LOW] CWE-125 CVE-2022-41602: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41593 [LOW] CWE-125 CVE-2022-41593: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41594 [LOW] CWE-125 CVE-2022-41594: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2021-22468 [LOW] CWE-668 CVE-2021-22468: A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulner A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage.

CVE-2021-22453 [LOW] CWE-125 CVE-2021-22453: A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may expl A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.

CVE-2024-5464 [LOW] CWE-200 CVE-2024-5464: Vulnerability of insufficient permission verification in the NearLink module Impact: Successful expl Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54612 [LOW] CWE-664 CVE-2025-54612: Iterator failure vulnerability in the card management module. Impact: Successful exploitation of thi Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54613 [LOW] CWE-664 CVE-2025-54613: Iterator failure vulnerability in the card management module. Impact: Successful exploitation of thi Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54621 [LOW] CWE-664 CVE-2025-54621: Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerabilit Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures.

CVE-2025-54619 [LOW] CWE-664 CVE-2025-54619: Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulne Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability.

CVE-2025-53171 [LOW] CWE-121 CVE-2025-53171: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53172 [LOW] CWE-121 CVE-2025-53172: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.