Huawei: >> Harmonyos Security Vulnerabilities
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
CVSS Score
9.1
EPSS Score
0.001
Published
2023-08-13
Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.
CVSS Score
9.1
EPSS Score
0.0
Published
2023-08-13
Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access.
CVSS Score
9.1
EPSS Score
0.001
Published
2023-08-13
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-13
Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-08-13
Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.
CVSS Score
7.5
EPSS Score
0.0
Published
2023-08-13
Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten.
CVSS Score
7.5
EPSS Score
0.0
Published
2023-08-13
Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-13
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-08-13
Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-13