The HwContacts module has a logic bypass vulnerability

The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality

The bundle management module lacks permission verification in some APIs

The WMS module lacks the authentication mechanism in some APIs

The WMS module lacks the authentication mechanism in some APIs

The geofencing kernel code does not verify the length of the input data

The geofencing kernel code has a vulnerability of not verifying the length of the input data

The IHwAntiMalPlugin interface lacks permission verification

The IHwAttestationService interface has a defect in authentication

The bundle management module lacks authentication and control mechanisms in some APIs

The bundle management module lacks authentication and control mechanisms in some APIs

The HwContacts module has a logic bypass vulnerability

The multi-screen collaboration module has a privilege escalation vulnerability

The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal…

The DUBAI module has a double free vulnerability

The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons

The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access

The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access

Some smartphones have the input validation vulnerability

Some smartphones have the out-of-bounds write vulnerability

The Wi-Fi module has a vulnerability in permission verification

The power consumption module has an out-of-bounds read vulnerability

The ProfileSDK has defects introduced in the design process

The IPC module has defects introduced in the design process

The application management module has a vulnerability in permission verification

The contacts component has a free (undefined) provider vulnerability

The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality

The system service has a vulnerability that causes incorrect return values

The system tool has inconsistent serialization and deserialization

The backup module has a path traversal vulnerability

The multi-screen collaboration module has a path traversal vulnerability

The preset launcher module has a permission verification vulnerability

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files

The DDMP/ODMF module has a service hijacking vulnerability

The power module has a vulnerability in permission verification

The lock screen module has defects introduced in the design process

The graphics display module has a UAF vulnerability when traversing graphic layers

The LBS module has a vulnerability in geofencing API access

The Display Service module has a UAF vulnerability

The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released

The memory management module has the logic bypass vulnerability

Missing parameter type validation in the DRM module

The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device…

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity

The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality

The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this…

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability

The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access…

The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which…