Browse CVEs

MEDIUM 5.3 CVE-2022-46313 The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartpho… Harmonyos 3.0.0+ Fix from $1,6002022-12-20 MEDIUM 5.3 CVE-2022-46318 The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings. Harmonyos 2.1+ Fix from $1,6002022-12-20 HIGH 7.5 CVE-2021-46856 The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiali… Emui Mitigation only Fix from $1,9502022-12-20 HIGH 7.5 CVE-2022-41591 The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files. Emui Mitigation only Fix from $1,9502022-12-20 HIGH 7.5 CVE-2022-41596 The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of … Harmonyos 2.1+ Fix from $1,9502022-12-20 HIGH 7.5 CVE-2022-41599 The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentia… Harmonyos 2.1+ Fix from $1,9502022-12-20 MEDIUM 5.5 CVE-2022-41590 Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation … Harmonyos No fix yet Fix from $1,6002022-12-20 CRITICAL 9.8 CVE-2022-44551 The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and a… Emui No fix yet Fix from $2,3002022-11-09 CRITICAL 9.8 CVE-2022-44558 The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escal… Harmonyos No fix yet Fix from $2,3002022-11-09 CRITICAL 9.8 CVE-2022-44559 The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escal… Harmonyos No fix yet Fix from $2,3002022-11-09 CRITICAL 9.8 CVE-2022-44562 The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause pri… Emui Mitigation only Fix from $2,3002022-11-09 HIGH 7.5 CVE-2022-44547 The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability. Harmonyos No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44549 The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the g… Harmonyos Mitigation only Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44550 The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system a… Harmonyos No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44552 The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. Emui No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44554 The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module … Harmonyos No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44555 The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable. Harmonyos No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44557 The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation o… Harmonyos No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2022-44561 The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arb… Emui Mitigation only Fix from $1,9502022-11-09 MEDIUM 5.9 CVE-2022-44563 There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. Harmonyos No fix yet Fix from $1,6002022-11-09 MEDIUM 5.3 CVE-2022-44553 The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successfu… Harmonyos Mitigation only Fix from $1,6002022-11-09 MEDIUM 5.3 CVE-2022-44560 The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modif… Emui Mitigation only Fix from $1,6002022-11-09 HIGH 7.5 CVE-2022-44546 The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this v… Harmonyos No fix yet Fix from $1,9502022-11-09 HIGH 7.5 CVE-2021-46852 The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Emui No fix yet Fix from $1,9502022-11-09 CRITICAL 9.8 CVE-2021-46851 The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video … Emui No fix yet Fix from $2,3002022-11-09 HIGH 7.5 CVE-2022-44556 Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,9502022-11-08 HIGH 7.5 CVE-2022-41588 The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. Emui No fix yet Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-41589 The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system … Emui No fix yet Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-41586 The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data … Emui No fix yet Fix from $1,9502022-10-14 MEDIUM 5.3 CVE-2022-41587 Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability. Emui No fix yet Fix from $1,6002022-10-14