Huawei Harmonyos vulnerabilities
1,134 vulnerabilities
Known vulnerabilities in Huawei Harmonyos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-40004huaweiharmonyos
EPSS score0.64%
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40053huaweiemui+2EPSS score0.71%
There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.CVE-2021-40017huaweiemui+1EPSS score0.65%
The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.CVE-2021-40010huaweiemui+2EPSS score1.22%
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.CVE-2021-40029huaweiemui+2EPSS score0.79%
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.CVE-2021-40030huaweiemui+2EPSS score0.54%
The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40001huaweiharmonyosEPSS score0.76%
The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.CVE-2021-40011huaweiemui+2EPSS score0.78%
There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-40061huaweiemui+2EPSS score0.63%
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-40026huaweiemui+2EPSS score0.63%
There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40032huaweiemui+1EPSS score0.90%
The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40022huaweiharmonyosEPSS score0.69%
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40009huaweiemui+2EPSS score0.65%
There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40049ubuntupms+3EPSS score0.77%
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.CVE-2021-40000huaweiharmonyosEPSS score0.38%
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.CVE-2021-40048huaweiemui+2EPSS score0.77%
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.CVE-2021-40035huaweiemui+2EPSS score0.79%
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.CVE-2021-40018huaweiharmonyosEPSS score0.67%
The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40050huaweiemui+2EPSS score1.09%
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.CVE-2021-40063huaweiemui+2EPSS score0.73%
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality.