HUAWEI HarmonyOS

• CVE-2024-36502 High 7.9 Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-36501 Medium 5.6 Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity. 0.1%
• CVE-2024-36500 High 7.8 Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-36499 Medium 6.8 Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2023-52721 Medium 6.2 The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2024-4046 Medium 6.4 Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-32999 Medium 6.8 Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-32998 Medium 5.9 NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2023-52720 Medium 4.1 Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-32997 High 8.4 Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-32996 Medium 6.2 Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-32995 Medium 6.2 Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2023-52719 High 7.1 Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-32993 Medium 5.6 Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2023-52384 Medium 4.7 Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2023-52383 Medium 4.7 Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-32992 High 7.5 Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability. 0.5%
• CVE-2024-32991 High 7.5 Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability. 0.5%
• CVE-2024-32990 Medium 6.1 Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2024-32989 Low 3.3 Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2024-27897 High 7.5 Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2024-27896 High 7.5 Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity. 0.3%
• CVE-2024-27895 High 7.5 Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. 0.3%
• CVE-2023-52364 Medium 6.3 Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write. 0.3%
• CVE-2023-52386 High 7.5 Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52385 Medium 6.2 Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2023-52554 Medium 6.5 Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2023-52553 High 7.4 Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability. 0.3%
• CVE-2023-52552 High 7.5 Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52551 Medium 5.3 Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2023-52550 High 7.5 Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52549 High 7.5 Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52546 High 7.5 Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2023-52545 High 7.5 Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52544 Medium 4.3 Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52359 High 7.5 Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52543 Medium 6.2 Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2023-52542 Medium 6.5 Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. 0.3%
• CVE-2023-52541 High 7.5 Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-52540 High 7.5 Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52539 High 7.5 Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52538 Critical 9.1 Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. 0.3%
• CVE-2023-52537 High 7.5 Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52388 High 7.5 Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52717 Medium 5.3 Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability. 0.3%
• CVE-2023-52716 High 7.5 Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52715 High 7.5 The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-52714 High 7.5 Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52713 High 7.7 Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. 0.1%
• CVE-2024-30418 High 7.5 Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%