Permission Control Vulnerability in HarmonyOS Clone Module

Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Path Traversal Vulnerability in HarmonyOS SMS App

Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.

Permission Control Flaw in HarmonyOS File Preview Exposes Confidential Information

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control flaw in HarmonyOS print module could compromise confidentiality and integrity

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.

Use after Free in Huawei HarmonyOS Package Management Leading to Service Integrity Impact

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

File system logic bypass leading to availability impact in HarmonyOS

Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.

Permission Control Vulnerability in Huawei EMUI and HarmonyOS Call Handling

Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

Permission Control Flaw in Huawei Audio Framework Leading to Confidentiality Risk

Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Denial of Service via Integer Overflow in Huawei Log Service

DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.

Out‑of‑Bounds IPC Write Vulnerability in Huawei HarmonyOS Impacting Availability

Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission Control Vulnerability in Service Notifications Affecting Availability

Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Huawei HG630 V2 Router Authentication Bypass via Serial Number

Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain administrative access by retrieving the device serial number. Attackers can query the /api/system/deviceinfo endpoint without authentication to extract the SerialNumber field, then use the last 8 characters as the default password to log in to the router.

Permission Control Vulnerability in Huawei EMUI and HarmonyOS Calls Impacting Availability

Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

Permission Control Vulnerability in HarmonyOS Smart Sensing Service Exposes Confidential Data

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission Control Vulnerability in HarmonyOS Manufacturability Design Module Impacting Availability

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission Control Vulnerability in Huawei HarmonyOS Web Interface

Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.