Huawei
Page 2 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68964 | Medium | 6.2 | 2026-01-14 | Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68963 | Medium | 5.7 | 2026-01-14 | Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-68962 | Medium | 5.1 | 2026-01-14 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68961 | Medium | 5.1 | 2026-01-14 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68960 | High | 8.4 | 2026-01-14 | Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68959 | Medium | 6.2 | 2026-01-14 | Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidential… |
CVE-2025-68958 | High | 8.0 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68957 | High | 8.4 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68956 | High | 8.0 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68955 | High | 8.0 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66334 | Low | 3.3 | 2025-12-08 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66333 | Low | 3.3 | 2025-12-08 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66332 | Low | 3.3 | 2025-12-08 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66331 | Low | 3.3 | 2025-12-08 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66330 | Medium | 4.9 | 2025-12-08 | App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-66329 | Medium | 4.0 | 2025-12-08 | Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66328 | High | 8.4 | 2025-12-08 | Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66327 | High | 7.1 | 2025-12-08 | Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-66325 | Medium | 6.2 | 2025-12-08 | Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58279 | Medium | 4.4 | 2025-12-08 | Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-66326 | Medium | 6.7 | 2025-12-08 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66324 | High | 8.4 | 2025-12-08 | Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integri… |
CVE-2025-66323 | Medium | 5.3 | 2025-12-08 | Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66322 | Medium | 5.1 | 2025-12-08 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66321 | Medium | 5.1 | 2025-12-08 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66320 | Medium | 5.1 | 2025-12-08 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-64312 | Medium | 4.9 | 2025-11-28 | Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58311 | Medium | 5.8 | 2025-11-28 | UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
CVE-2025-58308 | High | 7.3 | 2025-11-28 | Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abno… |
CVE-2025-58305 | Medium | 6.2 | 2025-11-28 | Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58304 | Medium | 4.9 | 2025-11-28 | Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58302 | High | 8.4 | 2025-11-28 | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-64315 | Medium | 4.4 | 2025-11-28 | Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and… |
CVE-2025-64314 | Critical | 9.3 | 2025-11-28 | Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2025-64313 | Medium | 5.3 | 2025-11-28 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-64311 | Medium | 5.1 | 2025-11-28 | Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58316 | High | 7.3 | 2025-11-28 | DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58315 | Medium | 5.5 | 2025-11-28 | Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58314 | Medium | 6.6 | 2025-11-28 | Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and co… |
CVE-2025-58312 | Medium | 5.1 | 2025-11-28 | Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58310 | High | 8.0 | 2025-11-28 | Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58309 | Medium | 6.8 | 2025-11-28 | Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentia… |
CVE-2025-58307 | Medium | 6.4 | 2025-11-28 | UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58303 | High | 8.4 | 2025-11-28 | UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58294 | Medium | 6.2 | 2025-11-28 | Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58301 | Medium | 6.2 | 2025-10-11 | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58300 | Medium | 6.2 | 2025-10-11 | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58293 | Medium | 5.5 | 2025-10-11 | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58289 | Medium | 5.9 | 2025-10-11 | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58299 | High | 8.4 | 2025-10-11 | Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58298 | High | 7.3 | 2025-10-11 | Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58297 | Medium | 5.9 | 2025-10-11 | Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58295 | Medium | 5.9 | 2025-10-11 | Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58292 | Low | 3.3 | 2025-10-11 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58291 | Low | 3.3 | 2025-10-11 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58290 | Low | 3.3 | 2025-10-11 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58288 | Medium | 5.5 | 2025-10-11 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58287 | High | 7.8 | 2025-10-11 | Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58286 | Low | 3.3 | 2025-10-11 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58285 | Medium | 5.3 | 2025-10-11 | Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58284 | Medium | 5.9 | 2025-10-11 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58283 | Medium | 5.5 | 2025-10-11 | Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58282 | Low | 2.8 | 2025-10-11 | Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58278 | Medium | 6.2 | 2025-10-11 | Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58277 | Medium | 4.0 | 2025-10-11 | Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54654 | Medium | 6.2 | 2025-10-11 | Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality |
CVE-2025-58313 | Medium | 5.1 | 2025-09-05 | Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device sta… |
CVE-2025-58296 | High | 7.5 | 2025-09-05 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-58281 | High | 8.4 | 2025-09-05 | Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58280 | High | 8.4 | 2025-09-05 | Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58276 | Medium | 6.8 | 2025-09-05 | Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-58257 | Medium | 5.7 | 2025-08-08 | EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution. |
CVE-2024-58256 | Medium | 4.5 | 2025-08-08 | EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution. |
CVE-2024-58255 | Medium | 5.0 | 2025-08-08 | EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution. |
CVE-2025-54651 | Medium | 4.8 | 2025-08-06 | Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54650 | Medium | 4.2 | 2025-08-06 | Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding… |
CVE-2025-54649 | Medium | 4.5 | 2025-08-06 | Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some loc… |
CVE-2025-54648 | Medium | 5.4 | 2025-08-06 | Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availabili… |
CVE-2025-54647 | Medium | 5.4 | 2025-08-06 | Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availabili… |
CVE-2025-54646 | Medium | 5.1 | 2025-08-06 | Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance. |
CVE-2025-54645 | Medium | 5.0 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability ma… |
CVE-2025-54644 | Medium | 6.6 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54643 | Medium | 6.6 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54642 | Medium | 6.7 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may aff… |
CVE-2025-54641 | Medium | 6.7 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may… |
CVE-2025-54640 | Medium | 5.5 | 2025-08-06 | ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exce… |
CVE-2025-54639 | Medium | 5.5 | 2025-08-06 | ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exce… |
CVE-2025-54638 | Medium | 5.5 | 2025-08-06 | Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad se… |
CVE-2025-54637 | Medium | 4.4 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54636 | Medium | 4.4 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability ma… |
CVE-2025-54635 | Medium | 5.9 | 2025-08-06 | Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availabi… |
CVE-2025-54634 | High | 8.0 | 2025-08-06 | Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availabil… |
CVE-2025-54633 | Medium | 6.7 | 2025-08-06 | Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service conf… |
CVE-2025-54632 | Medium | 6.8 | 2025-08-06 | Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2025-54631 | Medium | 6.7 | 2025-08-06 | Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54630 | Medium | 6.8 | 2025-08-06 | :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54629 | Medium | 6.7 | 2025-08-06 | Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-54628 | Medium | 5.3 | 2025-08-06 | Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54627 | High | 8.8 | 2025-08-06 | Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54626 | Medium | 4.4 | 2025-08-06 | Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. |