HUAWEI HarmonyOS

• CVE-2023-44104 Unrated Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44103 Unrated Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44102 Unrated Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable. 0.4%
• CVE-2023-44101 Unrated The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-44100 Unrated Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44097 Unrated Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44095 Unrated Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash. 0.5%
• CVE-2023-44094 Unrated Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-44109 Unrated Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44096 Unrated Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44093 Unrated Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2022-48606 Unrated Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2023-4565 Medium 5.3 Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable. 0.6%
• CVE-2023-41312 Unrated Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically. 0.4%
• CVE-2023-41311 Unrated Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically. 0.4%
• CVE-2023-41310 Unrated Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background. 0.2%
• CVE-2023-41309 Unrated Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2023-41308 Unrated Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality. 0.6%
• CVE-2023-41307 Unrated Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2023-41306 Unrated Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable. 0.4%
• CVE-2023-41305 Unrated Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality. 0.5%
• CVE-2023-41303 Unrated Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified. 0.7%
• CVE-2022-48605 Unrated Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability. 0.5%
• CVE-2023-41293 Unrated Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-41302 Unrated Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.5%
• CVE-2023-41301 Unrated Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-41300 Unrated Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. 0.5%
• CVE-2023-41299 Unrated DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. 0.5%
• CVE-2023-41298 Unrated Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-41297 Unrated Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking. 0.5%
• CVE-2023-41296 Unrated Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality. 0.4%
• CVE-2023-41295 Unrated Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim. 0.3%
• CVE-2023-41294 Unrated The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services. 0.5%
• CVE-2023-39409 Unrated DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. 0.5%
• CVE-2023-39408 Unrated DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. 0.4%
• CVE-2023-39407 Unrated The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity. 0.5%
• CVE-2021-46895 Unrated Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the 0.5%
• CVE-2023-39406 Unrated Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. 0.4%
• CVE-2023-39404 Unrated Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-39403 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.4%
• CVE-2023-39402 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.5%
• CVE-2023-39401 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.5%
• CVE-2023-39400 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.5%
• CVE-2023-39399 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.4%
• CVE-2023-39398 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.4%
• CVE-2023-39397 High 7.5 Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-39395 High 7.5 Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-39394 Unrated Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. 0.3%
• CVE-2023-39391 Unrated Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-39390 Unrated Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. 0.4%