Huawei
Page 5 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-51519 | Medium | 5.0 | 2024-11-05 | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51518 | Medium | 5.3 | 2024-11-05 | Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51517 | Medium | 5.1 | 2024-11-05 | Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51516 | Medium | 6.2 | 2024-11-05 | Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally. |
CVE-2024-51515 | Medium | 6.2 | 2024-11-05 | Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51514 | Medium | 5.3 | 2024-11-05 | Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51513 | Medium | 5.5 | 2024-11-05 | Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption. |
CVE-2024-51512 | Medium | 6.2 | 2024-11-05 | Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51511 | Medium | 6.2 | 2024-11-05 | Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-51510 | High | 7.6 | 2024-11-05 | Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-9136 | Medium | 6.7 | 2024-09-27 | Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidential… |
CVE-2024-47294 | Medium | 4.4 | 2024-09-27 | Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-47293 | Medium | 4.7 | 2024-09-27 | Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-47292 | Medium | 6.2 | 2024-09-27 | Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-47291 | Medium | 5.6 | 2024-09-27 | Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-47290 | Medium | 5.5 | 2024-09-27 | Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-8298 | Medium | 6.2 | 2024-09-04 | Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-45449 | Medium | 5.1 | 2024-09-04 | Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidenti… |
CVE-2024-45448 | Medium | 4.1 | 2024-09-04 | Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confi… |
CVE-2024-45447 | Medium | 4.4 | 2024-09-04 | Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-45446 | Medium | 5.5 | 2024-09-04 | Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-45445 | Medium | 4.0 | 2024-09-04 | Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-45444 | Medium | 5.5 | 2024-09-04 | Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-45443 | Medium | 6.1 | 2024-09-04 | Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
CVE-2024-45450 | Medium | 4.0 | 2024-09-04 | Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-45442 | Medium | 5.1 | 2024-09-04 | Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availabi… |
CVE-2024-45441 | Medium | 6.2 | 2024-09-04 | Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-42039 | Medium | 4.3 | 2024-09-04 | Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-42038 | High | 8.8 | 2024-08-08 | Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, i… |
CVE-2024-42037 | Critical | 9.3 | 2024-08-08 | Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-42036 | Low | 2.5 | 2024-08-08 | Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-42035 | High | 8.4 | 2024-08-08 | Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality. |
CVE-2024-42034 | Medium | 6.6 | 2024-08-08 | LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-42033 | Medium | 6.9 | 2024-08-08 | Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality. |
CVE-2024-42032 | Medium | 4.4 | 2024-08-08 | Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-42031 | High | 7.5 | 2024-08-08 | Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-42030 | Medium | 6.2 | 2024-08-08 | Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service conf… |
CVE-2023-7265 | Medium | 4.0 | 2024-08-08 | Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability |
CVE-2024-39674 | Medium | 6.2 | 2024-07-25 | Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-39673 | Medium | 6.8 | 2024-07-25 | Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confiden… |
CVE-2024-39672 | High | 8.4 | 2024-07-25 | Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. |
CVE-2024-39671 | Critical | 9.3 | 2024-07-25 | Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-39670 | Medium | 6.2 | 2024-07-25 | Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-7271 | Medium | 5.5 | 2024-07-25 | Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-40575 | Medium | 5.5 | 2024-07-24 | An issue in Huawei Technologies opengauss (openGauss 5.0.0 build) v.7.3.0 allows a local attacker to cause a denial of service via the modification of table at… |
CVE-2024-5465 | Medium | 5.9 | 2024-06-14 | Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-5464 | Medium | 4.0 | 2024-06-14 | Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confident… |
CVE-2024-36503 | High | 7.3 | 2024-06-14 | Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-36502 | High | 7.9 | 2024-06-14 | Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-36501 | Medium | 5.6 | 2024-06-14 | Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity. |
CVE-2024-36500 | High | 7.8 | 2024-06-14 | Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-36499 | Medium | 6.8 | 2024-06-14 | Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52712 | High | 7.8 | 2024-05-28 | Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previou… |
CVE-2023-52711 | High | 7.8 | 2024-05-28 | Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previou… |
CVE-2023-52710 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26), As the communication buffer size hasn’t been properly validated to be of the expected size, it can partiall… |
CVE-2023-52548 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malici… |
CVE-2023-52547 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker… |
CVE-2022-48681 | High | 7.2 | 2024-05-28 | Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail. |
CVE-2024-4046 | Medium | 6.4 | 2024-05-14 | Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32999 | Medium | 6.8 | 2024-05-14 | Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32998 | Medium | 5.9 | 2024-05-14 | NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32997 | High | 8.4 | 2024-05-14 | Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32996 | Medium | 6.2 | 2024-05-14 | Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32995 | Medium | 6.2 | 2024-05-14 | Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32993 | Medium | 5.6 | 2024-05-14 | Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32992 | High | 7.5 | 2024-05-14 | Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32991 | High | 7.5 | 2024-05-14 | Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32990 | Medium | 6.1 | 2024-05-14 | Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32989 | Low | 3.3 | 2024-05-14 | Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52721 | Medium | 6.2 | 2024-05-14 | The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-52720 | Medium | 4.1 | 2024-05-14 | Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52719 | High | 7.1 | 2024-05-14 | Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52384 | Medium | 4.7 | 2024-05-14 | Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52383 | Medium | 4.7 | 2024-05-14 | Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-27897 | High | 7.5 | 2024-04-08 | Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-27896 | High | 7.5 | 2024-04-08 | Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity. |
CVE-2024-27895 | High | 7.5 | 2024-04-08 | Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-52386 | High | 7.5 | 2024-04-08 | Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52385 | Medium | 6.2 | 2024-04-08 | Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52364 | Medium | 6.3 | 2024-04-08 | Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds… |
CVE-2023-52554 | Medium | 6.5 | 2024-04-08 | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52553 | High | 7.4 | 2024-04-08 | Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52552 | High | 7.5 | 2024-04-08 | Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52551 | Medium | 5.3 | 2024-04-08 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52550 | High | 7.5 | 2024-04-08 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52549 | High | 7.5 | 2024-04-08 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52546 | High | 7.5 | 2024-04-08 | Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confide… |
CVE-2023-52545 | High | 7.5 | 2024-04-08 | Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52544 | Medium | 4.3 | 2024-04-08 | Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidenti… |
CVE-2023-52543 | Medium | 6.2 | 2024-04-08 | Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52542 | Medium | 6.5 | 2024-04-08 | Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52541 | High | 7.5 | 2024-04-08 | Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52540 | High | 7.5 | 2024-04-08 | Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52539 | High | 7.5 | 2024-04-08 | Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52538 | Critical | 9.1 | 2024-04-08 | Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52537 | High | 7.5 | 2024-04-08 | Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52388 | High | 7.5 | 2024-04-08 | Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52359 | High | 7.5 | 2024-04-08 | Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affe… |
CVE-2024-30418 | High | 7.5 | 2024-04-07 | Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availabil… |
CVE-2024-30417 | High | 7.5 | 2024-04-07 | Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |