Wednesday, October 16, 2024

Nearly 300 Vulnerabilities Patched by Huawei’s HarmonyOS in 2022

Chinese tech giant Huawei patched nearly 300 vulnerabilities in its HarmonyOS operating system in 2022

Huawei is rewarding zero-click attacks that result in arbitrary code execution with prizes of up to €1 million through its HarmonyOS bug bounty programme. A maximum of €120,000 can be paid to researchers for new lockscreen bypass techniques.

Until the US government prohibited American companies from supplying software and technology to the Chinese company in 2019, Huawei smartphones and other gadgets relied on the Android operating system.

Later on in the year, Huawei announced HarmonyOS, a new operating system that runs on a variety of gadgets, including mobile phones, tablets, smart TVs, wearable technology, and car infotainment systems.

Huawei has a bug bounty programme with high payouts for severe vulnerabilities and exploit chains because the business is conscious that the operating system needs to be secure in order to compete with Android and iOS.

In comparison, roughly 800 vulnerabilities were patched in Android in 2022, according to data from CVE Details. However, Android is far more popular than HarmonyOS, which means it gets more scrutiny from security researchers.

According to a SecurityWeek research, HarmonyOS had more than 290 security holes addressed in 2022, including roughly 100 that affected third-party libraries. The information is taken from the company’s monthly security advisories from the previous year.

Almost twenty vulnerabilities have been classified as “critical,” while 94 have been classified as “high.”

These flaws can be used for privilege escalation, remote code execution, information gathering, and denial-of-service (DoS) attacks.

Suggest an edit to this article

Recommended:  Russia, Ukraine and the Danger of a Global Cyberwar

Check out our new Discord Cyber Awareness Server. Stay informed with CVE Alerts, Cybersecurity News & More!

Cybersecurity Knowledge Base

Homepage

Remember, CyberSecurity Starts With You!

  • Globally, 30,000 websites are hacked daily.
  • 64% of companies worldwide have experienced at least one form of a cyber attack.
  • There were 20M breached records in March 2021.
  • In 2020, ransomware cases grew by 150%.
  • Email is responsible for around 94% of all malware.
  • Every 39 seconds, there is a new attack somewhere on the web.
  • An average of around 24,000 malicious mobile apps are blocked daily on the internet.
Bookmark
Share the word, let's increase Cybersecurity Awareness as we know it
- Sponsored -

Sponsored Offer

Unleash the Power of the Cloud: Grab $200 Credit for 60 Days on DigitalOcean!

Digital ocean free 200

Discover more infosec

User Avatar
RiSec.Mitch
Just your average information security researcher from Delaware US.

more infosec reads

Subscribe for weekly updates

explore

more

security