HUAWEI HarmonyOS

• CVE-2023-26548 Unrated The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2022-48351 High 7.5 The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2022-48296 Medium 5.3 The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information ab 0.3%
• CVE-2022-48289 High 7.5 The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48288 High 7.5 The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48287 High 7.5 The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity. 0.4%
• CVE-2022-48302 High 7.5 The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48300 High 7.5 The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48294 High 7.5 The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48286 High 7.5 The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48298 High 7.5 The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. 0.4%
• CVE-2022-48297 High 7.5 The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. 0.4%
• CVE-2022-48299 High 7.5 The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48293 Medium 6.5 The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-48290 Critical 9.1 The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity. 0.4%
• CVE-2022-48292 Medium 6.5 The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-48295 High 7.5 The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications). 0.3%
• CVE-2022-48301 High 7.5 The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled. 0.3%
• CVE-2022-47976 High 7.5 The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections. 0.4%
• CVE-2022-47974 Medium 6.5 The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart. 0.2%
• CVE-2022-46762 High 7.5 The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-46761 High 7.5 The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons. 0.3%
• CVE-2021-46868 High 7.5 The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. 0.4%
• CVE-2022-47975 High 7.5 The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2021-46867 High 7.5 The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. 0.4%
• CVE-2022-46315 High 7.5 The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-41599 High 7.5 The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-41591 High 7.5 The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files. 0.5%
• CVE-2022-41596 High 7.5 The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components. 0.4%
• CVE-2022-41590 Medium 5.5 Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availa 0.1%
• CVE-2021-46856 High 7.5 The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-46316 Critical 9.8 A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability. 0.5%
• CVE-2022-46327 Critical 9.8 Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions. 0.5%
• CVE-2022-46324 Critical 9.8 Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. 0.5%
• CVE-2022-46321 High 7.5 The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-46319 Critical 9.8 Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write. 0.5%
• CVE-2022-46323 Critical 9.8 Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. 0.5%
• CVE-2022-46320 Critical 9.8 The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting. 0.5%
• CVE-2022-46312 Unrated The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications. 0.3%
• CVE-2022-46313 Medium 5.3 The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone. 0.4%
• CVE-2022-46322 High 7.5 Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. 0.5%
• CVE-2022-46314 High 7.5 The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. 0.5%
• CVE-2022-46328 High 7.5 Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-46318 Medium 5.3 The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings. 0.3%
• CVE-2022-46326 Critical 9.8 Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. 0.5%
• CVE-2022-46311 High 7.5 The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity. 0.4%
• CVE-2022-46325 Critical 9.8 Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. 0.5%
• CVE-2022-46310 High 7.5 The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-46317 High 7.5 The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.5%
• CVE-2022-44550 High 7.5 The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability. 0.6%