Huawei
Page 11 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22252 | High | 7.5 | 2022-05-13 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability. |
CVE-2022-29796 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-29795 | High | 7.5 | 2022-05-13 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-29794 | Critical | 9.8 | 2022-05-13 | The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, an… |
CVE-2022-29793 | High | 7.5 | 2022-05-13 | There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability. |
CVE-2022-29792 | High | 7.5 | 2022-05-13 | The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-29791 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-29790 | High | 7.5 | 2022-05-13 | The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service ex… |
CVE-2022-29789 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI s… |
CVE-2022-22261 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-22260 | Critical | 9.1 | 2022-05-13 | The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. |
CVE-2021-46789 | High | 7.5 | 2022-05-13 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability. |
CVE-2021-46788 | High | 7.5 | 2022-05-13 | Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be cov… |
CVE-2021-46787 | High | 7.5 | 2022-05-13 | The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to c… |
CVE-2021-46786 | Critical | 9.8 | 2022-05-13 | The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of… |
CVE-2021-46785 | Medium | 5.3 | 2022-05-13 | The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier. |
CVE-2022-22258 | Critical | 9.8 | 2022-04-11 | The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event no… |
CVE-2022-22257 | High | 7.5 | 2022-04-11 | The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-22256 | High | 7.5 | 2022-04-11 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-22255 | High | 7.5 | 2022-04-11 | The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. |
CVE-2022-22254 | High | 7.5 | 2022-04-11 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-22253 | High | 7.5 | 2022-04-11 | The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. |
CVE-2021-46742 | Critical | 9.1 | 2022-04-11 | The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may a… |
CVE-2021-46740 | High | 7.5 | 2022-04-11 | The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect d… |
CVE-2021-40065 | High | 7.5 | 2022-04-11 | The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-33658 | High | 7.8 | 2022-03-11 | atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file… |
CVE-2021-40064 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability. |
CVE-2021-40063 | High | 7.5 | 2022-03-10 | There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40062 | High | 7.5 | 2022-03-10 | There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect ava… |
CVE-2021-40061 | High | 7.5 | 2022-03-10 | There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability… |
CVE-2021-40060 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40059 | Medium | 6.5 | 2022-03-10 | There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40058 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40057 | High | 7.5 | 2022-03-10 | There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availabili… |
CVE-2021-40056 | High | 7.5 | 2022-03-10 | There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect ava… |
CVE-2021-40055 | Medium | 5.9 | 2022-03-10 | There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect inte… |
CVE-2021-40054 | High | 7.5 | 2022-03-10 | There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity. |
CVE-2021-40053 | Critical | 9.1 | 2022-03-10 | There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity. |
CVE-2021-40052 | High | 7.5 | 2022-03-10 | There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40051 | High | 7.5 | 2022-03-10 | There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40050 | Critical | 9.8 | 2022-03-10 | There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow. |
CVE-2021-40049 | High | 7.5 | 2022-03-10 | There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obt… |
CVE-2021-40048 | High | 7.5 | 2022-03-10 | There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability. |
CVE-2021-40047 | High | 7.5 | 2022-03-10 | There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect i… |
CVE-2021-40046 | Critical | 9.8 | 2022-02-25 | PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privil… |
CVE-2021-40043 | High | 7.8 | 2022-02-25 | The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend… |
CVE-2021-37103 | Medium | 5.5 | 2022-02-25 | There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-37027 | High | 7.5 | 2022-02-25 | There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-22489 | High | 7.5 | 2022-02-25 | There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22480 | Critical | 9.8 | 2022-02-25 | The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to heap memory overfl… |
CVE-2021-22479 | Medium | 5.5 | 2022-02-25 | The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash. |
CVE-2021-22478 | Medium | 5.5 | 2022-02-25 | The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may lead to information leakage. |
CVE-2021-22448 | Critical | 9.1 | 2022-02-25 | There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some fil… |
CVE-2021-22441 | Medium | 5.5 | 2022-02-25 | Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash. |
CVE-2021-22437 | High | 7.0 | 2022-02-25 | There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address acces… |
CVE-2021-22434 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22433 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22432 | Critical | 9.8 | 2022-02-25 | There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-22431 | Critical | 9.8 | 2022-02-25 | There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-22430 | Critical | 9.8 | 2022-02-25 | There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection. |
CVE-2021-22429 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22426 | Critical | 9.8 | 2022-02-25 | There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-22395 | High | 7.5 | 2022-02-25 | There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22394 | Critical | 9.1 | 2022-02-25 | There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaborat… |
CVE-2021-22319 | High | 7.5 | 2022-02-25 | There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows. |
CVE-2021-40045 | Medium | 5.5 | 2022-02-09 | There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may… |
CVE-2021-40044 | High | 8.8 | 2022-02-09 | There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations. |
CVE-2021-40015 | Medium | 4.7 | 2022-02-09 | There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability. |
CVE-2021-39997 | Critical | 9.8 | 2022-02-09 | There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds a… |
CVE-2021-39994 | Critical | 9.8 | 2022-02-09 | There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2021-39992 | High | 7.8 | 2022-02-09 | There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality… |
CVE-2021-39991 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-39986 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-37115 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-37109 | High | 7.8 | 2022-02-09 | There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure. |
CVE-2021-37107 | Medium | 5.5 | 2022-02-09 | There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-40042 | Medium | 6.5 | 2022-01-31 | There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product ve… |
CVE-2021-40033 | Medium | 5.5 | 2022-01-31 | There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain info… |
CVE-2021-40041 | Medium | 4.2 | 2022-01-10 | There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a l… |
CVE-2021-40039 | High | 7.5 | 2022-01-10 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integri… |
CVE-2021-40038 | High | 7.5 | 2022-01-10 | There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-40037 | Medium | 5.5 | 2022-01-10 | There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of t… |
CVE-2021-40035 | High | 7.5 | 2022-01-10 | There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of… |
CVE-2021-40032 | High | 7.5 | 2022-01-10 | The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40031 | High | 7.5 | 2022-01-10 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integri… |
CVE-2021-40029 | High | 7.5 | 2022-01-10 | There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of… |
CVE-2021-40028 | High | 7.5 | 2022-01-10 | The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity. |
CVE-2021-40027 | High | 7.5 | 2022-01-10 | The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40026 | High | 7.5 | 2022-01-10 | There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrit… |
CVE-2021-40025 | High | 7.5 | 2022-01-10 | The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data co… |
CVE-2021-40022 | High | 7.5 | 2022-01-10 | The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40021 | High | 7.5 | 2022-01-10 | The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40020 | High | 7.5 | 2022-01-10 | There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect serv… |
CVE-2021-40018 | High | 7.5 | 2022-01-10 | The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40014 | High | 7.5 | 2022-01-10 | The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40011 | High | 7.5 | 2022-01-10 | There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity. |
CVE-2021-40010 | Critical | 9.8 | 2022-01-10 | The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution. |
CVE-2021-40009 | Medium | 5.3 | 2022-01-10 | There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-40006 | Medium | 4.6 | 2022-01-10 | Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2021-40005 | High | 7.5 | 2022-01-10 | The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentialit… |