Huawei
Page 3 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-54647 | Medium | 5.4 | 2025-08-06 | Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availabili… |
CVE-2025-54646 | Medium | 5.1 | 2025-08-06 | Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance. |
CVE-2025-54645 | Medium | 5.0 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability ma… |
CVE-2025-54644 | Medium | 6.6 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54643 | Medium | 6.6 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54642 | Medium | 6.7 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may aff… |
CVE-2025-54641 | Medium | 6.7 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may… |
CVE-2025-54640 | Medium | 5.5 | 2025-08-06 | ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exce… |
CVE-2025-54639 | Medium | 5.5 | 2025-08-06 | ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exce… |
CVE-2025-54638 | Medium | 5.5 | 2025-08-06 | Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad se… |
CVE-2025-54637 | Medium | 4.4 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54636 | Medium | 4.4 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability ma… |
CVE-2025-54635 | Medium | 5.9 | 2025-08-06 | Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availabi… |
CVE-2025-54634 | High | 8.0 | 2025-08-06 | Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availabil… |
CVE-2025-54633 | Medium | 6.7 | 2025-08-06 | Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service conf… |
CVE-2025-54632 | Medium | 6.8 | 2025-08-06 | Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2025-54631 | Medium | 6.7 | 2025-08-06 | Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54630 | Medium | 6.8 | 2025-08-06 | :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54629 | Medium | 6.7 | 2025-08-06 | Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-54628 | Medium | 5.3 | 2025-08-06 | Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54627 | High | 8.8 | 2025-08-06 | Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54626 | Medium | 4.4 | 2025-08-06 | Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-54625 | Medium | 6.7 | 2025-08-06 | Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54624 | Medium | 5.7 | 2025-08-06 | Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54623 | Medium | 6.3 | 2025-08-06 | Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54622 | High | 8.3 | 2025-08-06 | Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiali… |
CVE-2025-54621 | Medium | 5.3 | 2025-08-06 | Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures. |
CVE-2025-54620 | Medium | 5.5 | 2025-08-06 | Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54619 | Medium | 5.3 | 2025-08-06 | Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availabilit… |
CVE-2025-54618 | Medium | 5.7 | 2025-08-06 | Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54617 | Medium | 6.8 | 2025-08-06 | Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE. |
CVE-2025-54616 | Medium | 4.0 | 2025-08-06 | Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54615 | Medium | 6.2 | 2025-08-06 | Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service conf… |
CVE-2025-54614 | Medium | 6.2 | 2025-08-06 | Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54613 | Medium | 5.9 | 2025-08-06 | Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-54612 | Medium | 5.9 | 2025-08-06 | Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-54611 | High | 7.3 | 2025-08-06 | EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54610 | Medium | 5.4 | 2025-08-06 | Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54609 | Medium | 5.4 | 2025-08-06 | Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54608 | Medium | 6.2 | 2025-08-06 | Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of… |
CVE-2025-54607 | High | 7.7 | 2025-08-06 | Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54606 | High | 7.3 | 2025-08-06 | Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
CVE-2025-54655 | High | 8.1 | 2025-08-06 | Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of t… |
CVE-2025-54653 | High | 8.4 | 2025-08-06 | Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualizat… |
CVE-2025-54652 | High | 8.4 | 2025-08-06 | Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualizat… |
CVE-2025-53186 | Medium | 5.9 | 2025-07-07 | Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this v… |
CVE-2025-53185 | Medium | 6.6 | 2025-07-07 | Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploi… |
CVE-2025-53184 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53183 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53182 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53181 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53180 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53179 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53178 | Medium | 4.8 | 2025-07-07 | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function… |
CVE-2025-53177 | Low | 3.9 | 2025-07-07 | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function o… |
CVE-2025-53176 | Low | 3.3 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53175 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53174 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53173 | Medium | 5.3 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53172 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53171 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53170 | Medium | 4.0 | 2025-07-07 | Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53169 | High | 7.6 | 2025-07-07 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-53168 | Medium | 5.7 | 2025-07-07 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-53167 | Medium | 6.9 | 2025-07-07 | Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confide… |
CVE-2024-58117 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-49599 | Medium | 4.1 | 2025-06-06 | Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account t… |
CVE-2025-48911 | High | 8.2 | 2025-06-06 | Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48910 | Medium | 5.5 | 2025-06-06 | Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48909 | High | 7.1 | 2025-06-06 | Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-48908 | Medium | 6.7 | 2025-06-06 | Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48907 | Medium | 6.2 | 2025-06-06 | Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48906 | High | 8.8 | 2025-06-06 | Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48905 | High | 8.1 | 2025-06-06 | Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wa… |
CVE-2025-48904 | Medium | 4.4 | 2025-06-06 | Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48903 | High | 7.8 | 2025-06-06 | Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48902 | Medium | 6.6 | 2025-06-06 | Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-58114 | Medium | 4.0 | 2025-06-06 | Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-46593 | Medium | 5.1 | 2025-05-06 | Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-46592 | Medium | 4.4 | 2025-05-06 | Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-46591 | Medium | 6.2 | 2025-05-06 | Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-46590 | Medium | 6.3 | 2025-05-06 | Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypass authentication an… |
CVE-2025-46589 | Medium | 4.4 | 2025-05-06 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. |
CVE-2025-46588 | Medium | 4.4 | 2025-05-06 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. |
CVE-2025-46587 | Medium | 6.2 | 2025-05-06 | Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-58252 | Medium | 6.2 | 2025-05-06 | Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confi… |
CVE-2025-46586 | Medium | 5.1 | 2025-05-06 | Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-46585 | High | 7.5 | 2025-05-06 | Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-46584 | High | 7.8 | 2025-05-06 | Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect servic… |
CVE-2025-31175 | High | 8.4 | 2025-04-07 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2025-31174 | Medium | 6.8 | 2025-04-07 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-31173 | High | 8.8 | 2025-04-07 | Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentialit… |
CVE-2025-31172 | High | 7.8 | 2025-04-07 | Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentialit… |
CVE-2025-31171 | Medium | 6.8 | 2025-04-07 | File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2025-31170 | High | 8.4 | 2025-04-07 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentialit… |
CVE-2024-58127 | High | 8.4 | 2025-04-07 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentialit… |
CVE-2024-58126 | High | 8.4 | 2025-04-07 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentialit… |
CVE-2024-58125 | High | 8.4 | 2025-04-07 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentialit… |
CVE-2024-58124 | High | 8.4 | 2025-04-07 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentialit… |
CVE-2024-58116 | Medium | 4.0 | 2025-04-07 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. |