HUAWEI HarmonyOS

• CVE-2024-56445 Medium 4.3 Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.3%
• CVE-2024-56444 High 7.5 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2024-56443 Medium 6.2 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-54120 Medium 4.1 Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.1%
• CVE-2024-56442 Medium 5.5 Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-56441 Medium 4.1 Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-56440 Medium 6.2 Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-56439 High 7.5 Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-56438 Medium 6.0 Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-56437 Medium 5.7 Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-52955 Medium 6.5 Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2023-52954 Medium 4.4 Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-52953 Medium 6.2 Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.3%
• CVE-2024-56436 Medium 5.5 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-56435 Medium 6.2 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-56434 Medium 4.4 UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. 0.2%
• CVE-2021-22484 High 7.5 Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM). 0.3%
• CVE-2021-37000 High 7.7 Some Huawei wearables have a permission management vulnerability. 0.1%
• CVE-2024-54122 Medium 6.2 Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2024-54119 Medium 6.2 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-54117 Medium 6.2 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2024-54116 Medium 4.3 Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-54115 Medium 4.3 Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-54114 Medium 4.4 Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-54113 Medium 6.5 Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption. 0.3%
• CVE-2024-54112 Medium 5.5 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-54111 Medium 5.7 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-54110 Medium 6.2 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2024-54109 Medium 6.5 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. 0.3%
• CVE-2024-54108 Medium 6.5 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-54107 High 7.1 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-54106 High 7.1 Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. 0.3%
• CVE-2024-54105 Medium 5.1 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. 0.2%
• CVE-2024-54104 Medium 6.2 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-54103 Medium 6.1 Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-54102 Medium 6.1 Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-54101 Medium 6.2 Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-54100 Medium 6.2 Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-54099 Medium 6.7 File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.1%
• CVE-2024-54098 High 8.5 Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity. 0.2%
• CVE-2024-54097 High 7.3 Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity. 0.3%
• CVE-2024-54096 Medium 5.3 Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy. 0.1%
• CVE-2024-51530 Medium 6.6 LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51529 Medium 5.5 Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability. 0.1%
• CVE-2024-51528 Medium 4.0 Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51527 Medium 5.1 Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51526 High 8.2 Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51525 Medium 6.2 Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51524 Medium 4.0 Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51523 High 7.1 Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%