Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Harmonyos
(Huawei)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 741 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-03-27 | CVE-2022-48346 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2023-03-27 | CVE-2022-48347 | The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2023-03-27 | CVE-2022-48356 | The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition. | Emui, Harmonyos | 7.5 | ||
| 2023-03-27 | CVE-2022-48357 | Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel. | Emui, Harmonyos | 7.5 | ||
| 2023-03-27 | CVE-2022-48359 | The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2023-03-27 | CVE-2023-26549 | The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 7.5 | ||
| 2023-04-16 | CVE-2022-48312 | The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. | Emui, Harmonyos | 9.1 | ||
| 2023-04-16 | CVE-2022-48313 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 6.5 | ||
| 2023-04-16 | CVE-2022-48314 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 6.5 | ||
| 2023-05-20 | CVE-2023-1692 | The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. | Emui, Harmonyos | 7.5 |