HUAWEI HarmonyOS

• CVE-2025-31174 Medium 6.8 Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2025-31173 High 8.8 Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-31172 High 7.8 Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-31171 Medium 6.8 File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-31170 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58127 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58126 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58125 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58124 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58116 Medium 4.0 Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-58115 Medium 4.0 Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-58113 Medium 5.3 Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2024-58112 High 7.5 Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2024-58111 High 7.5 Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2024-58110 Medium 4.6 Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2024-58109 Medium 4.6 Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2024-58108 Medium 4.6 Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2024-58107 High 7.5 Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2024-58106 Medium 4.6 Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2024-58050 Medium 6.2 Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-58049 Medium 5.0 Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-58048 Medium 6.7 Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2024-58047 Medium 5.0 Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-58046 Medium 6.2 Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-58045 High 8.6 Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-27521 Medium 6.8 Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-58044 High 8.4 Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-58043 High 7.3 Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-57962 Medium 6.1 Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-57961 Medium 6.8 Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.3%
• CVE-2024-57960 High 7.7 Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-57959 Medium 6.1 Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-57958 Medium 5.7 Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-12602 Medium 6.2 Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-57957 Medium 6.6 Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2024-57956 Low 2.8 Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-57955 Medium 6.1 Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-57954 Medium 6.2 Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-54121 Medium 6.2 Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-56456 Medium 6.8 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56455 Medium 5.5 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56454 Medium 5.5 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56453 Medium 6.8 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56452 Medium 5.5 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56451 High 7.3 Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56450 Medium 6.3 Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56449 Medium 6.6 Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-56448 Medium 6.7 Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-56447 High 7.8 Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-56446 Medium 4.0 Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%