Huawei
Page 10 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39010 | High | 7.5 | 2022-09-16 | The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network informati… |
CVE-2022-39009 | Critical | 9.8 | 2022-09-16 | The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functio… |
CVE-2022-39008 | Critical | 9.1 | 2022-09-16 | The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and w… |
CVE-2022-39007 | Critical | 9.8 | 2022-09-16 | The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-39006 | Medium | 5.9 | 2022-09-16 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2022-39005 | High | 7.5 | 2022-09-16 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. |
CVE-2022-39004 | High | 7.5 | 2022-09-16 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. |
CVE-2022-39003 | Critical | 9.1 | 2022-09-16 | Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted co… |
CVE-2022-39002 | Critical | 9.8 | 2022-09-16 | Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. |
CVE-2022-39001 | High | 7.5 | 2022-09-16 | The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. |
CVE-2022-39000 | Critical | 9.8 | 2022-09-16 | The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start… |
CVE-2022-38999 | Critical | 9.8 | 2022-09-16 | The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiali… |
CVE-2022-38997 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38996 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38995 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38994 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38993 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38992 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38991 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38990 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38989 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38988 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38987 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38979 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38978 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-46836 | High | 7.5 | 2022-09-16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confid… |
CVE-2021-40024 | High | 7.5 | 2022-09-16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confid… |
CVE-2021-40023 | High | 7.5 | 2022-09-16 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40019 | Critical | 9.1 | 2022-09-16 | Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-40017 | Critical | 9.8 | 2022-09-16 | The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2020-36601 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. |
CVE-2020-36600 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2022-37008 | High | 7.5 | 2022-08-10 | The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect… |
CVE-2022-37007 | High | 7.5 | 2022-08-10 | The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. |
CVE-2022-37006 | High | 7.5 | 2022-08-10 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability. |
CVE-2022-37005 | High | 7.5 | 2022-08-10 | The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-37004 | High | 7.5 | 2022-08-10 | The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availa… |
CVE-2022-37003 | Critical | 9.8 | 2022-08-10 | The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized acc… |
CVE-2022-37002 | Critical | 9.8 | 2022-08-10 | The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows… |
CVE-2022-37001 | High | 7.5 | 2022-08-10 | The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the… |
CVE-2021-40040 | High | 7.5 | 2022-08-10 | Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40034 | High | 7.5 | 2022-08-10 | The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availabi… |
CVE-2021-40030 | High | 7.5 | 2022-08-10 | The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34743 | High | 7.5 | 2022-07-12 | The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-34742 | High | 7.5 | 2022-07-12 | The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34741 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34740 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34739 | High | 7.5 | 2022-07-12 | The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of d… |
CVE-2022-34738 | High | 7.5 | 2022-07-12 | The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the… |
CVE-2022-34737 | Critical | 9.1 | 2022-07-12 | The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confi… |
CVE-2022-34736 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-34735 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2021-46741 | High | 7.5 | 2022-07-12 | The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system i… |
CVE-2021-40016 | Medium | 6.5 | 2022-07-12 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40013 | Medium | 6.5 | 2022-07-12 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity. |
CVE-2021-40012 | High | 7.5 | 2022-07-12 | Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect conf… |
CVE-2021-39999 | High | 7.5 | 2022-07-12 | There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a speci… |
CVE-2022-29798 | High | 7.5 | 2022-06-13 | There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service. |
CVE-2022-29797 | Critical | 9.8 | 2022-06-13 | There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege escalation. |
CVE-2022-22259 | Medium | 6.8 | 2022-06-13 | There is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful exploitation of this vulnerability may lead to a control of the… |
CVE-2021-40036 | Critical | 9.8 | 2022-06-13 | The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution. |
CVE-2022-31761 | High | 7.5 | 2022-06-13 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2022-31760 | Critical | 9.1 | 2022-06-13 | Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect… |
CVE-2022-31757 | High | 7.5 | 2022-06-13 | The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-31754 | High | 7.5 | 2022-06-13 | Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features. |
CVE-2022-31753 | High | 7.5 | 2022-06-13 | The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system avai… |
CVE-2022-31752 | Medium | 5.5 | 2022-06-13 | Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-46813 | High | 7.5 | 2022-06-13 | Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46812 | High | 7.5 | 2022-06-13 | The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2021-46811 | Medium | 5.3 | 2022-06-13 | HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cyc… |
CVE-2022-31763 | Medium | 5.5 | 2022-06-13 | The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-31762 | High | 7.8 | 2022-06-13 | The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-31759 | Medium | 5.5 | 2022-06-13 | AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-31758 | Medium | 4.7 | 2022-06-13 | The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-31756 | Medium | 5.5 | 2022-06-13 | The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-31755 | Medium | 5.5 | 2022-06-13 | The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-31751 | Medium | 5.5 | 2022-06-13 | The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. |
CVE-2021-46814 | High | 7.5 | 2022-06-13 | The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-22252 | High | 7.5 | 2022-05-13 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability. |
CVE-2022-29796 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-29795 | High | 7.5 | 2022-05-13 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-29794 | Critical | 9.8 | 2022-05-13 | The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, an… |
CVE-2022-29793 | High | 7.5 | 2022-05-13 | There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability. |
CVE-2022-29792 | High | 7.5 | 2022-05-13 | The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-29791 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-29790 | High | 7.5 | 2022-05-13 | The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service ex… |
CVE-2022-29789 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI s… |
CVE-2022-22261 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-22260 | Critical | 9.1 | 2022-05-13 | The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. |
CVE-2021-46789 | High | 7.5 | 2022-05-13 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability. |
CVE-2021-46788 | High | 7.5 | 2022-05-13 | Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be cov… |
CVE-2021-46787 | High | 7.5 | 2022-05-13 | The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to c… |
CVE-2021-46786 | Critical | 9.8 | 2022-05-13 | The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of… |
CVE-2021-46785 | Medium | 5.3 | 2022-05-13 | The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier. |
CVE-2022-22258 | Critical | 9.8 | 2022-04-11 | The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event no… |
CVE-2022-22257 | High | 7.5 | 2022-04-11 | The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-22256 | High | 7.5 | 2022-04-11 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-22255 | High | 7.5 | 2022-04-11 | The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. |
CVE-2022-22254 | High | 7.5 | 2022-04-11 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-22253 | High | 7.5 | 2022-04-11 | The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. |