Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Harmonyos
(Huawei)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 897 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-09-16 | CVE-2022-39005 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-09-16 | CVE-2022-39006 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. | Emui, Harmonyos, Magic_ui | 5.9 | ||
| 2022-09-16 | CVE-2022-39010 | The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network information. | Emui, Harmonyos | 7.5 | ||
| 2022-10-14 | CVE-2022-41602 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | Emui, Harmonyos | 3.4 | ||
| 2022-12-20 | CVE-2021-46856 | The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2022-12-20 | CVE-2022-41590 | Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability. | Harmonyos | 5.5 | ||
| 2022-12-20 | CVE-2022-41591 | The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files. | Emui, Harmonyos | 7.5 | ||
| 2022-12-20 | CVE-2022-41596 | The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components. | Emui, Harmonyos | 7.5 | ||
| 2022-12-20 | CVE-2022-41599 | The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2022-12-20 | CVE-2022-46310 | The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality. | Harmonyos | 7.5 |