HUAWEI HarmonyOS

• CVE-2025-58277 Medium 4.0 Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-54654 Medium 6.2 Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality <0.1%
• CVE-2025-58313 Medium 5.1 Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device standby module. <0.1%
• CVE-2025-58296 High 7.5 Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. <0.1%
• CVE-2025-58281 High 8.4 Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-58280 High 8.4 Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-58276 Medium 6.8 Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54651 Medium 4.8 Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-54650 Medium 4.2 Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function. 0.2%
• CVE-2025-54649 Medium 4.5 Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorr <0.1%
• CVE-2025-54648 Medium 5.4 Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54647 Medium 5.4 Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-54646 Medium 5.1 Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance. 0.1%
• CVE-2025-54645 Medium 5.0 Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54644 Medium 6.6 Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-54643 Medium 6.6 Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-54642 Medium 6.7 Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-54641 Medium 6.7 Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-54640 Medium 5.5 ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions. 0.1%
• CVE-2025-54639 Medium 5.5 ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions. 0.1%
• CVE-2025-54638 Medium 5.5 Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service. 0.1%
• CVE-2025-54637 Medium 4.4 Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-54636 Medium 4.4 Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54635 Medium 5.9 Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54634 High 8.0 Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54633 Medium 6.7 Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-54632 Medium 6.8 Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. 0.1%
• CVE-2025-54631 Medium 6.7 Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54630 Medium 6.8 :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2025-54629 Medium 6.7 Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity. <0.1%
• CVE-2025-54628 Medium 5.3 Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54627 High 8.8 Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2025-54625 Medium 6.7 Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54626 Medium 4.4 Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. <0.1%
• CVE-2025-54624 Medium 5.7 Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54623 Medium 6.3 Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54622 High 8.3 Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2025-54621 Medium 5.3 Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures. 0.1%
• CVE-2025-54620 Medium 5.5 Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-54619 Medium 5.3 Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability. 0.1%
• CVE-2025-54618 Medium 5.7 Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-54617 Medium 6.8 Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE. 0.4%
• CVE-2025-54616 Medium 4.0 Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-54615 Medium 6.2 Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-54614 Medium 6.2 Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-54613 Medium 5.9 Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. 0.1%
• CVE-2025-54612 Medium 5.9 Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. 0.1%
• CVE-2025-54611 High 7.3 EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-54610 Medium 5.4 Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54609 Medium 5.4 Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%