Huawei Harmonyos vulnerabilities, page 2
1,134 vulnerabilities
Known vulnerabilities in Huawei Harmonyos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-40039huaweiemui+2
EPSS score0.60%
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40038huaweiemui+2EPSS score0.60%
There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40012huaweiemui+2EPSS score0.86%
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.CVE-2021-40034huaweiemui+2EPSS score0.59%
The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability.CVE-2021-40028huaweiharmonyosEPSS score0.56%
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.CVE-2021-40025huaweiharmonyosEPSS score0.67%
The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40021huaweiharmonyosEPSS score0.67%
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40040huaweiemui+2EPSS score0.55%
Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2021-40047huaweiemui+2EPSS score0.61%
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-40055huaweiemui+2EPSS score0.51%
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.CVE-2021-40037huaweiemui+2EPSS score0.17%
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.CVE-2021-40051huaweiemui+2EPSS score0.75%
There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality.CVE-2021-40036huaweiharmonyosEPSS score1.03%
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.CVE-2021-40024huaweiemui+1EPSS score0.54%
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40002huaweiharmonyosEPSS score0.38%
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.CVE-2021-40065huaweiemui+2EPSS score0.82%
The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40052huaweiemui+2EPSS score0.77%
There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.CVE-2021-40027huaweiemui+1EPSS score0.84%
The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40031huaweiemui+2EPSS score0.60%
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40006huaweiemui+1EPSS score0.14%
Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.