Use‑After‑Free in HarmonyOS Communication Module Impacting Availability

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

Kernel Module Use‑After‑Free in Huawei EMUI and HarmonyOS Threatens Availability and Confidentiality

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Race Condition in HarmonyOS Thermal Management Leading to Availability Issues

Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.

Race Condition in HarmonyOS Power Consumption Statistics Module

Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability.

Out‑of‑Bounds Write Vulnerability in HarmonyOS File System

Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.

HarmonyOS Application Read Module Boundary Overflow Vulnerability

Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability.

Race Condition in Permission Management Service Leading to Denial of Service

Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.

UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability.

Improper Permission Control in Huawei EMUI and HarmonyOS Theme Setting Module

Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.

The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability.

Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality.

The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.

Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.

Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes.

The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.

The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.

The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.