HarmonyOS vulnerabilities
CVEs whose affected-version data names the HarmonyOS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
63 CVEsRSS
CVE-2025-54654Medium· 6.2Permission control vulnerability in the Gallery module
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58297Medium· 5.9Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.
Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.
▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58298High· 7.3Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.
Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.
▾ Twilighthuawei · harmonyosEPSS 0.09%via NVD