Huawei

Harmonyos

922 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-34742

  • EPSS 0.22%
  • Veröffentlicht 12.07.2022 14:15:19
  • Zuletzt bearbeitet 21.11.2024 07:10:06

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

7.5

CVE-2022-34743

  • EPSS 0.19%
  • Veröffentlicht 12.07.2022 14:15:19
  • Zuletzt bearbeitet 21.11.2024 07:10:06

The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.

7.5

CVE-2021-40012

  • EPSS 0.22%
  • Veröffentlicht 12.07.2022 14:15:14
  • Zuletzt bearbeitet 21.11.2024 06:23:22

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.

7.5

CVE-2021-46741

  • EPSS 0.18%
  • Veröffentlicht 12.07.2022 14:15:14
  • Zuletzt bearbeitet 21.11.2024 06:34:36

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.

9.8

CVE-2021-40036

  • EPSS 0.28%
  • Veröffentlicht 13.06.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 06:23:26

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.

5.3

CVE-2021-46811

  • EPSS 0.08%
  • Veröffentlicht 13.06.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 06:34:44

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.

7.5

CVE-2021-46812

  • EPSS 0.1%
  • Veröffentlicht 13.06.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 06:34:44

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.

7.5

CVE-2022-31753

  • EPSS 0.19%
  • Veröffentlicht 13.06.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 07:05:14

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.

7.5

CVE-2022-31757

  • EPSS 0.13%
  • Veröffentlicht 13.06.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 07:05:14

The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.

9.1

CVE-2022-31760

  • EPSS 0.13%
  • Veröffentlicht 13.06.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 07:05:15

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.