HUAWEI HarmonyOS

• CVE-2023-34160 Medium 5.3 Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 0.3%
• CVE-2023-34167 Medium 5.3 Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 0.3%
• CVE-2022-48495 Unrated Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained. 0.3%
• CVE-2022-48491 Unrated Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time. 0.3%
• CVE-2022-48488 Medium 5.3 Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desktop. 0.3%
• CVE-2023-34162 High 7.5 Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail. 0.4%
• CVE-2022-48494 Unrated Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. 0.3%
• CVE-2023-34166 High 7.5 Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart. 0.4%
• CVE-2022-48496 Unrated Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. 0.3%
• CVE-2023-34157 Critical 10.0 Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app. 0.4%
• CVE-2023-34165 Unrated Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access wit 0.3%
• CVE-2023-34154 Unrated Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system 0.3%
• CVE-2022-48478 Critical 9.8 The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. 0.5%
• CVE-2021-46883 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46884 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2022-48479 Critical 9.8 The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. 0.5%
• CVE-2023-31225 Low 3.3 The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. 0.1%
• CVE-2023-31226 High 7.5 The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-0117 Medium 5.3 The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as M 0.4%
• CVE-2023-31227 High 7.5 The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality. 0.4%
• CVE-2021-46885 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-0116 High 7.5 The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2021-46881 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46886 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46882 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-1696 High 7.5 The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-1694 High 7.5 The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-1693 High 7.5 The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-1692 High 7.5 The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48314 Medium 6.5 The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2022-48313 Medium 6.5 The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2022-48312 Critical 9.1 The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. 0.4%
• CVE-2022-48360 Unrated The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48358 Unrated The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions. 0.3%
• CVE-2022-48355 Unrated The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. 0.2%
• CVE-2022-48353 Critical 9.8 Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions. 0.5%
• CVE-2022-48349 Critical 9.1 The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability. 0.5%
• CVE-2022-48354 Unrated The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. 0.2%
• CVE-2022-48291 Unrated The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2022-48346 Unrated The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality. 0.5%
• CVE-2022-48359 Unrated The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality. 0.5%
• CVE-2022-48357 Unrated Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel. 0.5%
• CVE-2022-48361 Unrated The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources. 0.4%
• CVE-2022-48348 Critical 9.1 The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity. 0.4%
• CVE-2022-48350 High 7.5 The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48356 Unrated The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition. 0.5%
• CVE-2022-48352 High 7.5 Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic. 0.5%
• CVE-2022-48347 Unrated The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-26547 Unrated The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. 0.2%
• CVE-2023-26549 Unrated The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality. 0.4%