HUAWEI HarmonyOS

• CVE-2025-54608 Medium 6.2 Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device scre 0.1%
• CVE-2025-54607 High 7.7 Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2025-54606 High 7.3 Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. 0.1%
• CVE-2025-54655 High 8.1 Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module. <0.1%
• CVE-2025-54653 High 8.4 Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module. 0.1%
• CVE-2025-54652 High 8.4 Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module. 0.1%
• CVE-2025-53186 Medium 5.9 Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-53185 Medium 6.6 Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect s 0.1%
• CVE-2025-53184 Medium 6.5 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. 0.2%
• CVE-2025-53183 Medium 6.5 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. 0.2%
• CVE-2025-53182 Medium 6.5 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. 0.2%
• CVE-2025-53181 Medium 6.5 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. 0.2%
• CVE-2025-53180 Medium 6.5 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. 0.2%
• CVE-2025-53179 Medium 6.5 Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. 0.2%
• CVE-2025-53178 Medium 4.8 Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units. <0.1%
• CVE-2025-53177 Low 3.9 Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches. <0.1%
• CVE-2025-53176 Low 3.3 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. <0.1%
• CVE-2025-53175 Medium 4.0 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. <0.1%
• CVE-2025-53174 Medium 4.0 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. <0.1%
• CVE-2025-53173 Medium 5.3 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. 0.2%
• CVE-2025-53172 Medium 4.0 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. <0.1%
• CVE-2025-53171 Medium 4.0 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. <0.1%
• CVE-2024-58117 Medium 4.0 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. <0.1%
• CVE-2025-53170 Medium 4.0 Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. <0.1%
• CVE-2025-53169 High 7.6 Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera wi 0.2%
• CVE-2025-53168 Medium 5.7 Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera wi 0.2%
• CVE-2025-53167 Medium 6.9 Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2025-48908 Medium 6.7 Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-48911 High 8.2 Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-48910 Medium 5.5 Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-48909 High 7.1 Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-58114 Medium 4.0 Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-48907 Medium 6.2 Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-48906 High 8.8 Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-48905 High 8.1 Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types. 0.3%
• CVE-2025-48904 Medium 4.4 Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-48903 High 7.8 Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-48902 Medium 6.6 Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-46593 Medium 5.1 Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-46592 Medium 4.4 Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-46591 Medium 6.2 Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-46590 Medium 6.3 Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypass authentication and enable access to some network search fu 0.2%
• CVE-2025-46589 Medium 4.4 Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.1%
• CVE-2025-46588 Medium 4.4 Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.1%
• CVE-2024-58252 Medium 6.2 Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-46587 Medium 6.2 Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-46586 Medium 5.1 Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-46585 High 7.5 Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-46584 High 7.8 Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-31175 High 8.4 Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. 0.2%