Security Bulletins for HUAWEI Smart Watches, October 2024
HUAWEI is releasing monthly security updates for flagship models. This security update includes HUAWEI and third-party library patches:
This security update includes the following HUAWEI patches:
| CVE | Vulnerability Description | Impact | Severity | Affected Version |
|---|---|---|---|---|
| CVE-2024-47290 | Input validation vulnerability in the USB service module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS2.0.0, HarmonyOS2.1.0, HarmonyOS3.0.0, HarmonyOS3.1.0, HarmonyOS4.0.0,EMUI 14.0.0,EMUI 13.0.0,EMUI 12.0.0 |
| CVE-2024-47291 | Permission vulnerability in the ActivityManagerService (AMS) module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS4.2.0, HarmonyOS2.0.0, HarmonyOS2.1.0, HarmonyOS3.0.0, HarmonyOS3.1.0, HarmonyOS4.0.0,EMUI 14.0.0,EMUI 13.0.0,EMUI 12.0.0 |
| CVE-2024-47292 | Path traversal vulnerability in the Bluetooth module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS4.2.0,HarmonyOS2.0.0,HarmonyOS2.1.0,HarmonyOS3.0.0,HarmonyOS3.1.0,HarmonyOS4.0.0,EMUI 14.0.0,EMUI 13.0.0,EMUI 12.0.0 |
| CVE-2024-47294 | Access permission verification vulnerability in the input method framework module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS4.2.0,HarmonyOS2.0.0,HarmonyOS2.1.0,HarmonyOS3.0.0,HarmonyOS3.1.0,HarmonyOS4.0.0,EMUI 14.0.0,EMUI 13.0.0,EMUI 12.0.0 |
This security update includes the following third-party library patches:
| CVE | Severity | Affected Version |
|---|---|---|
| CVE-2024-40658 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2024-40662 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2024-40655 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2024-40656 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, EMUI 14.0.0, EMUI 13.0.0 |
| CVE-2024-33045 | High | HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, EMUI 14.0.0, EMUI 13.0.0 |
| CVE-2024-34739 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2024-34741 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2024-34727 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2024-34722 | High | HarmonyOS4.2.0, HarmonyOS4.0.0, HarmonyOS3.1.0, HarmonyOS3.0.0, HarmonyOS2.1.0, HarmonyOS2.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0 |
| CVE-2023-4622 | High | HarmonyOS3.1.0, HarmonyOS2.0.0, EMUI 13.0.0, EMUI 12.0.0 |
Updated on: 2024-10-05