Huawei Harmonyos vulnerabilities

CVE-2025-54626 [MEDIUM] CWE-416 CVE-2025-54626: Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulne Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54629 [MEDIUM] CWE-362 CVE-2025-54629: Race condition issue occurring in the physical page import process of the memory management module. Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-54614 [MEDIUM] CWE-20 CVE-2025-54614: Input verification vulnerability in the home screen module. Impact: Successful exploitation of this Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54634 [MEDIUM] CWE-755 CVE-2025-54634: Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Success Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54632 [MEDIUM] CWE-120 CVE-2025-54632: Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploit Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2025-54641 [MEDIUM] CWE-20 CVE-2025-54641: Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54615 [MEDIUM] CWE-200 CVE-2025-54615: Vulnerability of insufficient information protection in the media library module. Impact: Successful Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54638 [MEDIUM] CWE-502 CVE-2025-54638: Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service.

CVE-2025-54647 [MEDIUM] CWE-125 CVE-2025-54647: Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successf Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54631 [MEDIUM] CWE-190 CVE-2025-54631: Vulnerability of insufficient data length verification in the partition module. Impact: Successful e Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54650 [MEDIUM] CWE-129 CVE-2025-54650: Improper array index verification vulnerability in the audio codec module. Impact: Successful exploi Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function.

CVE-2025-54633 [MEDIUM] CWE-125 CVE-2025-54633: Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54644 [MEDIUM] CWE-125 CVE-2025-54644: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54637 [MEDIUM] CWE-125 CVE-2025-54637: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54643 [MEDIUM] CWE-125 CVE-2025-54643: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54651 [MEDIUM] CWE-362 CVE-2025-54651: Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vuln Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54623 [MEDIUM] CWE-680 CVE-2025-54623: Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of thi Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54649 [LOW] CWE-843 CVE-2025-54649: Vulnerability of using incompatible types to access resources in the location service. Impact: Succe Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect.

CVE-2025-54612 [LOW] CWE-664 CVE-2025-54612: Iterator failure vulnerability in the card management module. Impact: Successful exploitation of thi Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.

CVE-2025-54613 [LOW] CWE-664 CVE-2025-54613: Iterator failure vulnerability in the card management module. Impact: Successful exploitation of thi Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.