HarmonyOS vulnerabilities
234 known vulnerabilities in HarmonyOS from Huawei. 234 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Permission control vulnerability in the event notification management module.
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.6 High severity
Permission control vulnerability in the event notification module.
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.1 Critical severity
HarmonyOS: Heap-based Buffer Overflow
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.5 High severity
Vulnerability of improper permission control in the theme setting module.
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.1 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
HarmonyOS: Exposure of Sensitive Information to an Unauthorized Actor
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
Configuration defect vulnerability in the file management module.
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.
- 7.1 High severity
HarmonyOS: Out-of-bounds Read
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.1 High severity
Permission control vulnerability in the startup recovery module.
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.5 High severity
HarmonyOS: Use After Free
Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Heap-based Buffer Overflow
:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Incorrect Access of Indexable Resource
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
- 7.4 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Improper Certificate Validation
Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
Status verification vulnerability in the lock screen module.
Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.8 High severity
HarmonyOS: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module.
- 7.6 High severity
HarmonyOS: Improper Authentication
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.
- 7.5 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.2 High severity
HarmonyOS: Incorrect Privilege Assignment
Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability.
- 8.1 High severity
HarmonyOS: Inconsistency Between Implementation and Documented Design
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.
- 7.1 High severity
HarmonyOS: Improper Access Control
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.7 High severity
HarmonyOS: Improper Access Control
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
HarmonyOS: Out-of-bounds Write
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Out-of-bounds Write
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
Vulnerability of improper resource management in the memory management module Impact…
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Uncaught Exception
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Uncaught Exception
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
Vulnerability of incomplete verification information in the VPN service module Impact…
Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful…
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.8 Critical severity
HarmonyOS: Use After Free
Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 9.1 Critical severity
HarmonyOS: Out-of-bounds Read
Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
HarmonyOS: Insertion of Sensitive Information into Log File
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Improper Authorization
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Channel Accessible by Non-Endpoint
Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Improper Control of Generation of Code
Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability.