Huawei
Page 10 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41581 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of da… |
CVE-2022-41580 | Critical | 9.8 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of da… |
CVE-2022-41578 | Critical | 9.8 | 2022-10-14 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented… |
CVE-2022-41577 | High | 7.1 | 2022-10-14 | The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may c… |
CVE-2022-41576 | High | 7.8 | 2022-10-14 | The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted o… |
CVE-2022-39011 | High | 7.5 | 2022-10-14 | The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38998 | High | 7.5 | 2022-10-14 | The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-b… |
CVE-2022-38986 | Critical | 9.1 | 2022-10-14 | The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38985 | High | 7.5 | 2022-10-14 | The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38984 | High | 7.5 | 2022-10-14 | The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-b… |
CVE-2022-38983 | Critical | 9.8 | 2022-10-14 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. |
CVE-2022-38982 | Critical | 9.8 | 2022-10-14 | The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked. |
CVE-2022-38981 | High | 7.5 | 2022-10-14 | The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. |
CVE-2022-38980 | Critical | 9.8 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may… |
CVE-2022-38977 | High | 7.5 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification… |
CVE-2021-46840 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicio… |
CVE-2021-46839 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of… |
CVE-2022-37395 | High | 7.5 | 2022-09-20 | A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions includ… |
CVE-2022-33735 | Medium | 6.5 | 2022-09-20 | There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause s… |
CVE-2021-46835 | Medium | 4.3 | 2022-09-20 | There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. |
CVE-2021-46834 | Medium | 5.5 | 2022-09-20 | A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected p… |
CVE-2020-36602 | Medium | 6.1 | 2022-09-20 | There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed me… |
CVE-2022-39010 | High | 7.5 | 2022-09-16 | The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network informati… |
CVE-2022-39009 | Critical | 9.8 | 2022-09-16 | The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functio… |
CVE-2022-39008 | Critical | 9.1 | 2022-09-16 | The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and w… |
CVE-2022-39007 | Critical | 9.8 | 2022-09-16 | The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-39006 | Medium | 5.9 | 2022-09-16 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2022-39005 | High | 7.5 | 2022-09-16 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. |
CVE-2022-39004 | High | 7.5 | 2022-09-16 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. |
CVE-2022-39003 | Critical | 9.1 | 2022-09-16 | Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted co… |
CVE-2022-39002 | Critical | 9.8 | 2022-09-16 | Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. |
CVE-2022-39001 | High | 7.5 | 2022-09-16 | The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. |
CVE-2022-39000 | Critical | 9.8 | 2022-09-16 | The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start… |
CVE-2022-38999 | Critical | 9.8 | 2022-09-16 | The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiali… |
CVE-2022-38997 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38996 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38995 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38994 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38993 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38992 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38991 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38990 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38989 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38988 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38987 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38979 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38978 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-46836 | High | 7.5 | 2022-09-16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confid… |
CVE-2021-40024 | High | 7.5 | 2022-09-16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confid… |
CVE-2021-40023 | High | 7.5 | 2022-09-16 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40019 | Critical | 9.1 | 2022-09-16 | Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-40017 | Critical | 9.8 | 2022-09-16 | The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2020-36601 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. |
CVE-2020-36600 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2022-37008 | High | 7.5 | 2022-08-10 | The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect… |
CVE-2022-37007 | High | 7.5 | 2022-08-10 | The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. |
CVE-2022-37006 | High | 7.5 | 2022-08-10 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability. |
CVE-2022-37005 | High | 7.5 | 2022-08-10 | The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-37004 | High | 7.5 | 2022-08-10 | The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availa… |
CVE-2022-37003 | Critical | 9.8 | 2022-08-10 | The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized acc… |
CVE-2022-37002 | Critical | 9.8 | 2022-08-10 | The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows… |
CVE-2022-37001 | High | 7.5 | 2022-08-10 | The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the… |
CVE-2021-40040 | High | 7.5 | 2022-08-10 | Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40034 | High | 7.5 | 2022-08-10 | The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availabi… |
CVE-2021-40030 | High | 7.5 | 2022-08-10 | The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34743 | High | 7.5 | 2022-07-12 | The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-34742 | High | 7.5 | 2022-07-12 | The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34741 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34740 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34739 | High | 7.5 | 2022-07-12 | The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of d… |
CVE-2022-34738 | High | 7.5 | 2022-07-12 | The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the… |
CVE-2022-34737 | Critical | 9.1 | 2022-07-12 | The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confi… |
CVE-2022-34736 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-34735 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2021-46741 | High | 7.5 | 2022-07-12 | The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system i… |
CVE-2021-40016 | Medium | 6.5 | 2022-07-12 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40013 | Medium | 6.5 | 2022-07-12 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity. |
CVE-2021-40012 | High | 7.5 | 2022-07-12 | Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect conf… |
CVE-2021-39999 | High | 7.5 | 2022-07-12 | There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a speci… |
CVE-2022-29798 | High | 7.5 | 2022-06-13 | There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service. |
CVE-2022-29797 | Critical | 9.8 | 2022-06-13 | There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege escalation. |
CVE-2022-22259 | Medium | 6.8 | 2022-06-13 | There is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful exploitation of this vulnerability may lead to a control of the… |
CVE-2021-40036 | Critical | 9.8 | 2022-06-13 | The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution. |
CVE-2022-31761 | High | 7.5 | 2022-06-13 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2022-31760 | Critical | 9.1 | 2022-06-13 | Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect… |
CVE-2022-31757 | High | 7.5 | 2022-06-13 | The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-31754 | High | 7.5 | 2022-06-13 | Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features. |
CVE-2022-31753 | High | 7.5 | 2022-06-13 | The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system avai… |
CVE-2022-31752 | Medium | 5.5 | 2022-06-13 | Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-46813 | High | 7.5 | 2022-06-13 | Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46812 | High | 7.5 | 2022-06-13 | The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2021-46811 | Medium | 5.3 | 2022-06-13 | HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cyc… |
CVE-2022-31763 | Medium | 5.5 | 2022-06-13 | The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-31762 | High | 7.8 | 2022-06-13 | The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-31759 | Medium | 5.5 | 2022-06-13 | AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-31758 | Medium | 4.7 | 2022-06-13 | The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-31756 | Medium | 5.5 | 2022-06-13 | The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-31755 | Medium | 5.5 | 2022-06-13 | The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-31751 | Medium | 5.5 | 2022-06-13 | The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. |
CVE-2021-46814 | High | 7.5 | 2022-06-13 | The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. |