Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Harmonyos
(Huawei)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 897 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-01-03 | CVE-2021-37128 | HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file. | Harmonyos | 9.8 | ||
| 2022-01-03 | CVE-2021-37132 | PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission. | Harmonyos | 5.3 | ||
| 2022-01-03 | CVE-2021-37134 | Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related components. | Harmonyos | 8.1 | ||
| 2022-01-03 | CVE-2021-39966 | There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-01-03 | CVE-2021-39968 | Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class. | Harmonyos | 7.5 | ||
| 2022-01-03 | CVE-2021-39969 | There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. | Emui, Harmonyos, Magic_ui | 7.5 | ||
| 2022-01-03 | CVE-2021-39970 | HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission. | Harmonyos | 7.5 | ||
| 2022-01-03 | CVE-2021-39971 | Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could compromise confidentiality. | Harmonyos | 7.5 | ||
| 2022-01-03 | CVE-2021-39972 | MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality. | Harmonyos | 7.5 | ||
| 2022-01-03 | CVE-2021-39973 | There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down. | Emui, Harmonyos, Magic_ui | 7.5 |