Huawei
Page 11 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46742 | Critical | 9.1 | 2022-04-11 | The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may a… |
CVE-2021-46740 | High | 7.5 | 2022-04-11 | The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect d… |
CVE-2021-40065 | High | 7.5 | 2022-04-11 | The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-33658 | High | 7.8 | 2022-03-11 | atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file… |
CVE-2021-40064 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability. |
CVE-2021-40063 | High | 7.5 | 2022-03-10 | There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40062 | High | 7.5 | 2022-03-10 | There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect ava… |
CVE-2021-40061 | High | 7.5 | 2022-03-10 | There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability… |
CVE-2021-40060 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40059 | Medium | 6.5 | 2022-03-10 | There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40058 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40057 | High | 7.5 | 2022-03-10 | There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availabili… |
CVE-2021-40056 | High | 7.5 | 2022-03-10 | There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect ava… |
CVE-2021-40055 | Medium | 5.9 | 2022-03-10 | There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect inte… |
CVE-2021-40054 | High | 7.5 | 2022-03-10 | There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity. |
CVE-2021-40053 | Critical | 9.1 | 2022-03-10 | There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity. |
CVE-2021-40052 | High | 7.5 | 2022-03-10 | There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40051 | High | 7.5 | 2022-03-10 | There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40050 | Critical | 9.8 | 2022-03-10 | There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow. |
CVE-2021-40049 | High | 7.5 | 2022-03-10 | There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obt… |
CVE-2021-40048 | High | 7.5 | 2022-03-10 | There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability. |
CVE-2021-40047 | High | 7.5 | 2022-03-10 | There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect i… |
CVE-2021-40046 | Critical | 9.8 | 2022-02-25 | PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privil… |
CVE-2021-40043 | High | 7.8 | 2022-02-25 | The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend… |
CVE-2021-37103 | Medium | 5.5 | 2022-02-25 | There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-37027 | High | 7.5 | 2022-02-25 | There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-22489 | High | 7.5 | 2022-02-25 | There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22480 | Critical | 9.8 | 2022-02-25 | The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to heap memory overfl… |
CVE-2021-22479 | Medium | 5.5 | 2022-02-25 | The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash. |
CVE-2021-22478 | Medium | 5.5 | 2022-02-25 | The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may lead to information leakage. |
CVE-2021-22448 | Critical | 9.1 | 2022-02-25 | There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some fil… |
CVE-2021-22441 | Medium | 5.5 | 2022-02-25 | Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash. |
CVE-2021-22437 | High | 7.0 | 2022-02-25 | There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address acces… |
CVE-2021-22434 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22433 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22432 | Critical | 9.8 | 2022-02-25 | There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-22431 | Critical | 9.8 | 2022-02-25 | There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-22430 | Critical | 9.8 | 2022-02-25 | There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection. |
CVE-2021-22429 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22426 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22395 | High | 7.5 | 2022-02-25 | There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22394 | Critical | 9.1 | 2022-02-25 | There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaborat… |
CVE-2021-22319 | High | 7.5 | 2022-02-25 | There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows. |
CVE-2021-40045 | Medium | 5.5 | 2022-02-09 | There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may… |
CVE-2021-40044 | High | 8.8 | 2022-02-09 | There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations. |
CVE-2021-40015 | Medium | 4.7 | 2022-02-09 | There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability. |
CVE-2021-39997 | Critical | 9.8 | 2022-02-09 | There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds a… |
CVE-2021-39994 | Critical | 9.8 | 2022-02-09 | There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2021-39992 | High | 7.8 | 2022-02-09 | There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality… |
CVE-2021-39991 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-39986 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-37115 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-37109 | High | 7.8 | 2022-02-09 | There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure. |
CVE-2021-37107 | Medium | 5.5 | 2022-02-09 | There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-40042 | Medium | 6.5 | 2022-01-31 | There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product ve… |
CVE-2021-40033 | Medium | 5.5 | 2022-01-31 | There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain info… |
CVE-2021-40041 | Medium | 4.2 | 2022-01-10 | There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a l… |
CVE-2021-40039 | High | 7.5 | 2022-01-10 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integri… |
CVE-2021-40038 | High | 7.5 | 2022-01-10 | There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-40037 | Medium | 5.5 | 2022-01-10 | There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of t… |
CVE-2021-40035 | High | 7.5 | 2022-01-10 | There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of… |
CVE-2021-40032 | High | 7.5 | 2022-01-10 | The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40031 | High | 7.5 | 2022-01-10 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integri… |
CVE-2021-40029 | High | 7.5 | 2022-01-10 | There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of… |
CVE-2021-40028 | High | 7.5 | 2022-01-10 | The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity. |
CVE-2021-40027 | High | 7.5 | 2022-01-10 | The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40026 | High | 7.5 | 2022-01-10 | There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrit… |
CVE-2021-40025 | High | 7.5 | 2022-01-10 | The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data co… |
CVE-2021-40022 | High | 7.5 | 2022-01-10 | The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40021 | High | 7.5 | 2022-01-10 | The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40020 | High | 7.5 | 2022-01-10 | There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect serv… |
CVE-2021-40018 | High | 7.5 | 2022-01-10 | The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40014 | High | 7.5 | 2022-01-10 | The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40011 | High | 7.5 | 2022-01-10 | There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity. |
CVE-2021-40010 | Critical | 9.8 | 2022-01-10 | The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution. |
CVE-2021-40009 | Medium | 5.3 | 2022-01-10 | There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-40006 | Medium | 4.6 | 2022-01-10 | Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40005 | High | 7.5 | 2022-01-10 | The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentialit… |
CVE-2021-40004 | High | 7.5 | 2022-01-10 | The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40003 | Medium | 5.3 | 2022-01-10 | HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40002 | High | 8.8 | 2022-01-10 | The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the r… |
CVE-2021-40001 | Medium | 5.3 | 2022-01-10 | The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable. |
CVE-2021-40000 | High | 8.8 | 2022-01-10 | The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the r… |
CVE-2021-39998 | High | 7.5 | 2022-01-10 | There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of this vulner… |
CVE-2021-39996 | Critical | 9.8 | 2022-01-10 | There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow. |
CVE-2021-39993 | Critical | 9.8 | 2022-01-10 | There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-39990 | Critical | 9.8 | 2022-01-03 | The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience. |
CVE-2021-39989 | High | 7.5 | 2022-01-03 | The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause… |
CVE-2021-39988 | High | 7.5 | 2022-01-03 | The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. |
CVE-2021-39987 | High | 7.5 | 2022-01-03 | The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. |
CVE-2021-39985 | High | 7.5 | 2022-01-03 | The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a process to restart. |
CVE-2021-39984 | High | 7.5 | 2022-01-03 | Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service. |
CVE-2021-39983 | High | 7.5 | 2022-01-03 | The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. |
CVE-2021-39982 | Critical | 9.1 | 2022-01-03 | Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by… |
CVE-2021-39981 | Medium | 5.3 | 2022-01-03 | Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows y… |
CVE-2021-39980 | Medium | 5.3 | 2022-01-03 | Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead t… |
CVE-2021-39979 | Critical | 9.8 | 2022-01-03 | HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity. |
CVE-2021-39978 | High | 7.5 | 2022-01-03 | Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues. |
CVE-2021-39977 | High | 7.5 | 2022-01-03 | The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. |
CVE-2021-39975 | High | 7.5 | 2022-01-03 | Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks. |