Huawei Harmonyos vulnerabilities

CVE-2024-58117 [LOW] CWE-121 CVE-2024-58117: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53175 [LOW] CWE-121 CVE-2025-53175: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53174 [LOW] CWE-121 CVE-2025-53174: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-53176 [LOW] CWE-121 CVE-2025-53176: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitatio Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function.

CVE-2025-58308 [LOW] CWE-358 CVE-2025-58308: Vulnerability of improper criterion security check in the call module. Impact: Successful exploitati Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2025-54649 [LOW] CWE-843 CVE-2025-54649: Vulnerability of using incompatible types to access resources in the location service. Impact: Succe Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect.

CVE-2021-22464 [LOW] CWE-125 CVE-2021-22464: A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit thi A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart.

CVE-2023-31225 [LOW] CWE-362 CVE-2023-31225: The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability.

CVE-2025-58313 [LOW] CWE-362 CVE-2025-58313: Race condition vulnerability in the device standby module. Impact: Successful exploitation of this v Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device standby module.

CVE-2023-41310 [LOW] CWE-400 CVE-2023-41310: Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerab Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.

CVE-2026-41986 [LOW] CWE-606 CVE-2026-41986: Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.