Vulnerabilities > Huawei > Harmonyos > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-01-10 CVE-2021-40010 Out-of-bounds Write vulnerability in Huawei Emui, Harmonyos and Magic UI
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
network
low complexity
huawei CWE-787
critical
9.8
2022-01-10 CVE-2021-39996 Out-of-bounds Write vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones.
network
low complexity
huawei CWE-787
critical
9.8
2022-01-03 CVE-2021-39990 Out-of-bounds Write vulnerability in Huawei Harmonyos
The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.
network
low complexity
huawei CWE-787
critical
9.8
2022-01-03 CVE-2021-39982 Improper Privilege Management vulnerability in Huawei Harmonyos 2.0
Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications.
network
low complexity
huawei CWE-269
critical
9.1
2022-01-03 CVE-2021-39979 Code Injection vulnerability in Huawei Harmonyos
HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.
network
low complexity
huawei CWE-94
critical
9.8
2022-01-03 CVE-2021-37128 Path Traversal vulnerability in Huawei Harmonyos
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
network
low complexity
huawei CWE-22
critical
9.8
2022-01-03 CVE-2021-37116 Improper Input Validation vulnerability in Huawei Harmonyos
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.
network
low complexity
huawei CWE-20
critical
9.1
2021-12-08 CVE-2021-37051 Out-of-bounds Read vulnerability in Huawei Emui, Harmonyos and Magic UI
There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
network
low complexity
huawei CWE-125
critical
9.1
2021-12-08 CVE-2021-37049 Out-of-bounds Write vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.
network
low complexity
huawei CWE-787
critical
9.8
2021-12-08 CVE-2021-37045 Use After Free vulnerability in Huawei Emui, Harmonyos and Magic UI
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.
network
low complexity
huawei CWE-416
critical
9.8