Vulnerabilities > Huawei > Harmonyos > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-01-08 | CVE-2024-56440 | Incorrect Default Permissions vulnerability in Huawei Emui and Harmonyos Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. | 7.5 |
| 2025-01-08 | CVE-2024-56442 | Unspecified vulnerability in Huawei Emui and Harmonyos Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. | 7.5 |
| 2025-01-08 | CVE-2024-56443 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 7.5 |
| 2025-01-08 | CVE-2024-56444 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 7.5 |
| 2025-01-08 | CVE-2024-56446 | Use of Uninitialized Resource vulnerability in Huawei Harmonyos 5.0.0 Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability. | 7.5 |
| 2025-01-08 | CVE-2024-56447 | Incorrect Default Permissions vulnerability in Huawei Emui and Harmonyos Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 7.5 |
| 2025-01-08 | CVE-2024-56434 | Unspecified vulnerability in Huawei Emui and Harmonyos UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. | 7.5 |
| 2025-01-08 | CVE-2024-56435 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 7.5 |
| 2025-01-08 | CVE-2024-56436 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 7.5 |
| 2024-12-28 | CVE-2021-22484 | Unspecified vulnerability in Huawei Harmonyos 2.0.0 Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM). | 7.5 |