HUAWEI HarmonyOS

• CVE-2023-39387 Unrated Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. 0.3%
• CVE-2023-39386 Unrated Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart. 0.4%
• CVE-2023-39385 Unrated Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access. 0.4%
• CVE-2023-39384 Unrated Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-39383 Unrated Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security. 0.4%
• CVE-2023-39382 Unrated Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart. 0.4%
• CVE-2023-39381 Unrated Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-39380 Unrated Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. 0.4%
• CVE-2023-39405 Unrated Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges. 0.5%
• CVE-2023-39396 Unrated Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2023-39393 Unrated Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten. 0.2%
• CVE-2023-39392 Unrated Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten. 0.2%
• CVE-2023-39389 Unrated Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability. 0.4%
• CVE-2023-39388 Unrated Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability. 0.4%
• CVE-2022-48520 Unrated Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48519 Unrated Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48518 Unrated Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause maliciou 0.1%
• CVE-2023-1695 Unrated Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-1691 Unrated Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2022-48517 Unrated Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48516 Unrated Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality. 0.4%
• CVE-2022-48515 Unrated Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2022-48514 Unrated The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48513 Unrated Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.5%
• CVE-2021-46892 Unrated Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2022-48511 Unrated Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally. 0.5%
• CVE-2022-48510 Unrated Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. 0.5%
• CVE-2022-48509 Unrated Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally. 0.3%
• CVE-2022-48507 Unrated Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-34164 Unrated Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-3456 Unrated Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-37245 Unrated Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem. 0.5%
• CVE-2023-37242 Unrated Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate t 0.4%
• CVE-2023-37241 Unrated Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-37240 Unrated Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read. 0.5%
• CVE-2023-37239 Unrated Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program. 0.5%
• CVE-2023-37238 Unrated Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projecti 0.3%
• CVE-2021-46894 Unrated Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation. 0.4%
• CVE-2022-48512 Unrated Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally. 0.5%
• CVE-2022-48508 Unrated Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. 0.3%
• CVE-2023-3455 Unrated Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity. 0.4%
• CVE-2021-46893 Unrated Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity. 0.3%
• CVE-2021-46891 Unrated Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.4%
• CVE-2021-46890 Unrated Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.4%
• CVE-2023-34156 Unrated Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied. 0.4%
• CVE-2023-34158 Medium 5.3 Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 0.3%
• CVE-2023-34159 Critical 9.8 Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality. 0.5%
• CVE-2023-34163 High 7.5 Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-34161 High 7.5 nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-34155 Unrated Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability. 0.4%