HUAWEI HarmonyOS

• CVE-2021-22489 Unrated There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability. 0.7%
• CVE-2021-22480 Unrated The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to heap memory overflow. 0.7%
• CVE-2021-22479 Unrated The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash. 0.2%
• CVE-2021-22478 Unrated The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may lead to information leakage. 0.2%
• CVE-2021-22441 Unrated Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash. 0.2%
• CVE-2021-40015 Unrated There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability. 0.1%
• CVE-2021-40045 Unrated There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2021-40032 Unrated The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality. 0.9%
• CVE-2021-40028 Unrated The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity. 0.6%
• CVE-2021-40027 Unrated The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality. 0.9%
• CVE-2021-40025 Unrated The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40022 Unrated The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40021 Unrated The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40018 Unrated The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40014 Unrated The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 1.0%
• CVE-2021-40039 Unrated There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity. 0.6%
• CVE-2021-40038 Unrated There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. 0.6%
• CVE-2021-40037 Unrated There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to 0.2%
• CVE-2021-40035 Unrated There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function s 0.8%
• CVE-2021-40031 Unrated There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity. 0.6%
• CVE-2021-40029 Unrated There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function s 0.8%
• CVE-2021-40026 Unrated There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. 0.6%
• CVE-2021-40009 Unrated There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. 0.7%
• CVE-2021-40005 Unrated The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40006 Unrated Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality. 0.1%
• CVE-2021-40004 Unrated The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40003 Unrated HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-40002 Unrated The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end. 0.4%
• CVE-2021-40000 Unrated The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end. 0.4%
• CVE-2021-40001 Unrated The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable. 0.8%
• CVE-2021-39974 Unrated There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2021-39973 Unrated There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down. 0.7%
• CVE-2021-39969 Unrated There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2021-39966 Unrated There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2021-39967 High 7.5 There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service con 0.7%
• CVE-2021-37133 High 7.5 There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2021-39990 Critical 9.8 The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience. 0.8%
• CVE-2021-39988 High 7.5 The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. 0.7%
• CVE-2021-39989 High 7.5 The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart. 0.7%
• CVE-2021-39987 High 7.5 The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. 0.7%
• CVE-2021-39985 High 7.5 The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a process to restart. 0.7%
• CVE-2021-39984 High 7.5 Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service. 0.7%
• CVE-2021-39983 High 7.5 The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. 0.7%
• CVE-2021-39977 High 7.5 The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. 0.7%
• CVE-2021-37118 Unrated The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak. 0.6%
• CVE-2021-37112 Unrated Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak. 0.5%
• CVE-2021-39982 Unrated Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notificatio 0.7%
• CVE-2021-39981 Unrated Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call. 0.5%
• CVE-2021-39980 Unrated Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure. 0.6%
• CVE-2021-39979 Unrated HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity. 1.1%