HUAWEI HarmonyOS

• CVE-2022-38981 High 7.5 The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. 0.5%
• CVE-2022-38986 Critical 9.1 The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module a 0.6%
• CVE-2022-39010 Unrated The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network information. 0.6%
• CVE-2022-39009 Critical 9.8 The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functions. 0.7%
• CVE-2022-39001 High 7.5 The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. 0.9%
• CVE-2022-39007 Critical 9.8 The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. 0.7%
• CVE-2022-38999 Unrated The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability. 0.6%
• CVE-2022-38997 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38996 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38995 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38994 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38992 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38991 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38979 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38978 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38989 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38988 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-39005 Unrated The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. 0.6%
• CVE-2022-39004 Unrated The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. 0.6%
• CVE-2022-38987 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-39006 Unrated The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2022-38993 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38990 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-39000 Unrated The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup. 0.6%
• CVE-2021-46836 Unrated Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2021-40024 Unrated Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-39008 Critical 9.1 The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to sy 0.7%
• CVE-2021-40030 High 7.5 The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-37005 High 7.5 The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-37003 Medium 6.5 The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files. 0.5%
• CVE-2022-37004 High 7.5 The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2022-37002 High 7.4 The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background. 0.5%
• CVE-2022-37008 High 7.5 The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability. 0.3%
• CVE-2022-37001 Unrated The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash. 0.6%
• CVE-2022-37007 High 7.5 The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2021-40034 Unrated The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2021-40012 Unrated Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality. 0.9%
• CVE-2022-34738 Unrated The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background. 0.6%
• CVE-2022-34737 Unrated The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 0.7%
• CVE-2022-34742 Unrated The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.9%
• CVE-2022-34739 Unrated The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address map 0.7%
• CVE-2022-34741 Unrated The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. 0.3%
• CVE-2022-34740 Unrated The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. 0.3%
• CVE-2022-34743 Unrated The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-34736 Unrated The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. 0.7%
• CVE-2022-34735 Unrated The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. 0.7%
• CVE-2021-46741 Unrated The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity. 0.8%
• CVE-2021-46811 Unrated HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. 0.5%
• CVE-2022-31753 Unrated The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-31757 Unrated The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%