Vulnerabilities > Huawei > Harmonyos > 3.1.0

DATE CVE VULNERABILITY TITLE RISK
2023-05-20 CVE-2023-1692 Incorrect Permission Assignment for Critical Resource vulnerability in Huawei Emui and Harmonyos
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.
network
low complexity
huawei CWE-732
7.5
2023-05-20 CVE-2023-1696 Unspecified vulnerability in Huawei Emui and Harmonyos
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.
network
low complexity
huawei
7.5
2023-04-16 CVE-2022-48313 Unspecified vulnerability in Huawei Emui and Harmonyos
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process.
low complexity
huawei
6.5
2023-04-16 CVE-2022-48314 Unspecified vulnerability in Huawei Emui and Harmonyos
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process.
low complexity
huawei
6.5
2023-03-27 CVE-2022-48291 Missing Authentication for Critical Function vulnerability in Huawei Emui and Harmonyos
The Bluetooth module has an authentication bypass vulnerability in the pairing process.
low complexity
huawei CWE-306
6.5
2023-03-27 CVE-2022-48346 Unspecified vulnerability in Huawei Emui and Harmonyos
The HwContacts module has a logic bypass vulnerability.
network
low complexity
huawei
7.5
2023-03-27 CVE-2022-48354 Out-of-bounds Write vulnerability in Huawei Emui and Harmonyos
The Bluetooth module has a heap out-of-bounds write vulnerability.
low complexity
huawei CWE-787
6.5
2023-03-27 CVE-2022-48355 Out-of-bounds Write vulnerability in Huawei Emui and Harmonyos
The Bluetooth module has a heap out-of-bounds read vulnerability.
low complexity
huawei CWE-787
6.5
2023-03-27 CVE-2022-48359 Unspecified vulnerability in Huawei Emui and Harmonyos
The recovery mode for updates has a vulnerability that causes arbitrary disk modification.
network
low complexity
huawei
7.5
2023-03-27 CVE-2023-26547 Deserialization of Untrusted Data vulnerability in Huawei Emui and Harmonyos
The InputMethod module has a vulnerability of serialization/deserialization mismatch.
local
low complexity
huawei CWE-502
7.8