Browse CVEs

HIGH 7.5 CVE-2024-57955 Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Harmonyos No fix yet Fix from $1,9502025-02-06 HIGH 7.5 CVE-2024-57956 Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability. Harmonyos No fix yet Fix from $1,9502025-02-06 HIGH 7.5 CVE-2024-57957 Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service… Harmonyos Mitigation only Fix from $1,9502025-02-06 HIGH 7.5 CVE-2024-12602 Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiali… Harmonyos No fix yet Fix from $1,9502025-02-06 MEDIUM 5.5 CVE-2024-56454 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulner… Harmonyos No fix yet Fix from $1,6002025-01-08 MEDIUM 5.5 CVE-2024-56455 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulner… Harmonyos Mitigation only Fix from $1,6002025-01-08 MEDIUM 5.5 CVE-2024-56456 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulner… Harmonyos No fix yet Fix from $1,6002025-01-08 HIGH 7.5 CVE-2024-54121 Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Harmonyos No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56448 Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availabili… Emui No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56449 Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Emui No fix yet Fix from $1,9502025-01-08 MEDIUM 5.5 CVE-2024-56450 Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,6002025-01-08 MEDIUM 5.5 CVE-2024-56451 Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect ava… Harmonyos Mitigation only Fix from $1,6002025-01-08 MEDIUM 5.5 CVE-2024-56452 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulner… Harmonyos Mitigation only Fix from $1,6002025-01-08 MEDIUM 5.5 CVE-2024-56453 Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulner… Harmonyos No fix yet Fix from $1,6002025-01-08 HIGH 7.5 CVE-2024-56446 Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availabi… Harmonyos No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56447 Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service… Emui No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56439 Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confident… Harmonyos No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56440 Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnor… Emui No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56442 Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features… Emui No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56443 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confident… Harmonyos No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56444 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confident… Harmonyos Mitigation only Fix from $1,9502025-01-08 MEDIUM 5.9 CVE-2024-56441 Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Emui No fix yet Fix from $1,6002025-01-08 MEDIUM 5.3 CVE-2024-56445 Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to… Harmonyos No fix yet Fix from $1,6002025-01-08 HIGH 7.5 CVE-2023-52954 Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2023-52955 Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to… Emui No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56437 Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect … Harmonyos No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56438 Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,9502025-01-08 MEDIUM 5.9 CVE-2024-54120 Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perfo… Harmonyos No fix yet Fix from $1,6002025-01-08 CRITICAL 9.1 CVE-2023-52953 Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiali… Emui Mitigation only Fix from $2,3002025-01-08 HIGH 7.5 CVE-2024-56434 UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. Emui Mitigation only Fix from $1,9502025-01-08