Browse CVEs

HIGH 7.5 CVE-2021-40035 There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful explo… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40038 There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40039 There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect servi… Harmonyos 2.0+ Fix from $1,9502022-01-10 MEDIUM 5.5 CVE-2021-40037 There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploit… Harmonyos 2.0+ Fix from $1,6002022-01-10 CRITICAL 9.8 CVE-2021-40010 The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution. Emui No fix yet Fix from $2,3002022-01-10 HIGH 8.8 CVE-2021-40002 The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command executio… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40004 The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality. Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40005 The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data conf… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40011 There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity. Emui No fix yet Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40014 The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confident… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40018 The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40020 There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may a… Emui No fix yet Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40021 The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality. Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40022 The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality. Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40025 The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affe… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40026 There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect servic… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40027 The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiali… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40028 The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity. Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40029 There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful explo… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-40031 There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect servi… Emui No fix yet Fix from $1,9502022-01-10 MEDIUM 5.3 CVE-2021-40003 HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Harmonyos 2.0+ Fix from $1,6002022-01-10 MEDIUM 5.3 CVE-2021-40009 There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service inte… Harmonyos 2.0+ Fix from $1,6002022-01-10 CRITICAL 9.8 CVE-2021-39993 There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. Emui No fix yet Fix from $2,3002022-01-10 CRITICAL 9.8 CVE-2021-39996 There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memor… Harmonyos 2.0+ Fix from $2,3002022-01-10 HIGH 8.8 CVE-2021-40000 The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command executio… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2021-39998 There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of t… Harmonyos 2.0+ Fix from $1,9502022-01-10 MEDIUM 5.3 CVE-2021-40001 The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavaila… Harmonyos 2.0+ Fix from $1,6002022-01-10 CRITICAL 9.8 CVE-2021-39990 The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience. Harmonyos 2.0+ Fix from $2,3002022-01-03 CRITICAL 9.8 CVE-2021-39979 HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity. Harmonyos 2.0+ Fix from $2,3002022-01-03 CRITICAL 9.1 CVE-2021-39982 Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrar… Harmonyos Mitigation only Fix from $2,3002022-01-03