HUAWEI HarmonyOS

• CVE-2021-46812 Unrated The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. 0.6%
• CVE-2022-31760 Unrated Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 0.7%
• CVE-2022-31762 Unrated The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. 0.2%
• CVE-2022-31759 Unrated AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31755 Unrated The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31756 Unrated The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-31751 Unrated The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31758 Unrated The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.1%
• CVE-2022-31763 Unrated The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2021-46814 Unrated The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-29796 Unrated The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-29795 Unrated The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. 0.7%
• CVE-2022-29794 Unrated The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality. 0.8%
• CVE-2022-29792 Unrated The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-29791 Unrated The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-29790 Unrated The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions. 0.7%
• CVE-2022-29789 Unrated The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-22261 Unrated The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-22260 Unrated The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. 0.7%
• CVE-2021-46787 Unrated The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash. 0.8%
• CVE-2021-46786 Unrated The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access. 0.8%
• CVE-2021-46785 Unrated The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier. 0.5%
• CVE-2021-40065 Unrated The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.8%
• CVE-2021-46740 Unrated The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality. 0.8%
• CVE-2021-46742 Unrated The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability. 0.7%
• CVE-2022-22253 Unrated The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. 0.3%
• CVE-2022-22254 Unrated A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-22255 Unrated The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. 0.7%
• CVE-2022-22256 Unrated The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-22257 Unrated The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. 0.6%
• CVE-2021-40047 Unrated There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity. 0.6%
• CVE-2021-40048 Unrated There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability. 0.8%
• CVE-2021-40049 Unrated There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization. 0.8%
• CVE-2021-40050 Unrated There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow. 1.1%
• CVE-2021-40051 Unrated There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality. 0.8%
• CVE-2021-40052 Unrated There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability. 0.8%
• CVE-2021-40055 Unrated There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity. 0.5%
• CVE-2021-40061 Unrated There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity. 0.6%
• CVE-2021-40063 Unrated There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality. 0.7%
• CVE-2021-40064 Unrated There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability. 0.8%
• CVE-2021-22429 Unrated There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22432 Unrated There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.9%
• CVE-2021-22430 Unrated There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection. 0.9%
• CVE-2021-22426 Unrated There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22431 Unrated There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.8%
• CVE-2021-22433 Unrated There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22434 Unrated There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22394 Unrated There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaboration. 0.8%
• CVE-2021-22395 Unrated There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2021-22319 Unrated There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows. 0.7%