Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Harmonyos
(Huawei)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 897 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-08-10 | CVE-2021-40034 | The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-08-10 | CVE-2021-40040 | Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-08-10 | CVE-2022-37001 | The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash. | Harmonyos | 7.5 | ||
| 2022-08-10 | CVE-2022-37002 | The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background. | Emui, Harmonyos, Magic_ui | 9.8 | ||
| 2022-08-10 | CVE-2022-37003 | The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files. | Emui, Harmonyos, Magic_ui | 9.8 | ||
| 2022-08-10 | CVE-2022-37004 | The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-08-10 | CVE-2022-37005 | The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-08-10 | CVE-2022-37006 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability. | Emui, Harmonyos | 7.5 | ||
| 2022-08-10 | CVE-2022-37007 | The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-08-10 | CVE-2022-37008 | The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability. | Emui, Harmonyos, Magic_ui | 7.5 |