Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Harmonyos
(Huawei)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 897 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-03-10 | CVE-2021-40064 | There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-04-11 | CVE-2021-40065 | The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-04-11 | CVE-2021-46740 | The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2022-04-11 | CVE-2021-46742 | The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability. | Emui, Harmonyos, Magic_ui | 9.1 | ||
| 2022-04-11 | CVE-2022-22253 | The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-04-11 | CVE-2022-22254 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-04-11 | CVE-2022-22255 | The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. | Emui, Harmonyos | 7.5 | ||
| 2022-04-11 | CVE-2022-22256 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-04-11 | CVE-2022-22257 | The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-04-11 | CVE-2022-22258 | The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege. | Emui, Harmonyos, Magic_ui | 9.8 |