Huawei
Page 7 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44114 | High | 7.5 | 2023-10-11 | Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44108 | High | 7.5 | 2023-10-11 | Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-44107 | Critical | 9.1 | 2023-10-11 | Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service ava… |
CVE-2023-44105 | Critical | 9.8 | 2023-10-11 | Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to pe… |
CVE-2023-44111 | High | 7.5 | 2023-10-11 | Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44110 | Medium | 4.3 | 2023-10-11 | Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-44106 | Critical | 9.8 | 2023-10-11 | API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-44104 | High | 7.5 | 2023-10-11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44103 | High | 7.5 | 2023-10-11 | Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44102 | Medium | 5.3 | 2023-10-11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavail… |
CVE-2023-44101 | High | 7.5 | 2023-10-11 | The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentia… |
CVE-2023-44100 | High | 7.5 | 2023-10-11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44097 | High | 7.5 | 2023-10-11 | Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44095 | High | 7.5 | 2023-10-11 | Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash. |
CVE-2023-41304 | Medium | 5.3 | 2023-10-11 | Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to t… |
CVE-2023-44109 | High | 7.5 | 2023-10-11 | Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44096 | High | 7.5 | 2023-10-11 | Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-44094 | Medium | 5.3 | 2023-10-11 | Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-44093 | High | 7.5 | 2023-10-11 | Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confiden… |
CVE-2023-4565 | Medium | 5.3 | 2023-09-27 | Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailab… |
CVE-2023-41312 | Medium | 5.3 | 2023-09-27 | Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically. |
CVE-2023-41311 | Medium | 5.3 | 2023-09-27 | Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically. |
CVE-2023-41310 | Low | 3.3 | 2023-09-27 | Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the b… |
CVE-2023-41309 | High | 7.5 | 2023-09-27 | Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-41308 | High | 7.5 | 2023-09-27 | Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-41307 | High | 7.5 | 2023-09-27 | Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-41306 | Low | 3.7 | 2023-09-27 | Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice… |
CVE-2023-41305 | High | 7.5 | 2023-09-27 | Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability m… |
CVE-2022-48606 | High | 7.5 | 2023-09-27 | Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-41303 | High | 7.5 | 2023-09-25 | Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure… |
CVE-2023-41302 | High | 7.5 | 2023-09-25 | Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnorm… |
CVE-2023-41301 | High | 7.5 | 2023-09-25 | Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-41300 | High | 7.5 | 2023-09-25 | Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-41293 | High | 7.5 | 2023-09-25 | Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48605 | Critical | 9.8 | 2023-09-25 | Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availabil… |
CVE-2023-41299 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-41298 | High | 7.5 | 2023-09-25 | Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-41297 | Critical | 9.8 | 2023-09-25 | Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking. |
CVE-2023-41296 | Critical | 9.1 | 2023-09-25 | Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality. |
CVE-2023-41295 | Medium | 5.3 | 2023-09-25 | Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim. |
CVE-2023-41294 | Critical | 9.8 | 2023-09-25 | The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services. |
CVE-2023-39409 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-39408 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-39407 | Critical | 9.1 | 2023-09-25 | The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity. |
CVE-2023-39406 | High | 7.5 | 2023-08-13 | Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. |
CVE-2023-39404 | High | 7.5 | 2023-08-13 | Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the devi… |
CVE-2023-39403 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39402 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39401 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39400 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39399 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39398 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39397 | High | 7.5 | 2023-08-13 | Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-39395 | High | 7.5 | 2023-08-13 | Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-39394 | High | 7.5 | 2023-08-13 | Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. |
CVE-2023-39391 | High | 7.5 | 2023-08-13 | Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-39390 | High | 7.5 | 2023-08-13 | Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the devi… |
CVE-2023-39387 | Medium | 5.3 | 2023-08-13 | Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. |
CVE-2023-39386 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps t… |
CVE-2023-39385 | Critical | 9.1 | 2023-08-13 | Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access. |
CVE-2021-46895 | Critical | 9.1 | 2023-08-13 | Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped… |
CVE-2023-39405 | Critical | 9.8 | 2023-08-13 | Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with… |
CVE-2023-39396 | High | 7.5 | 2023-08-13 | Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-39393 | High | 7.5 | 2023-08-13 | Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be mal… |
CVE-2023-39392 | High | 7.5 | 2023-08-13 | Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and ov… |
CVE-2023-39389 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailabi… |
CVE-2023-39388 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailabi… |
CVE-2023-39384 | High | 7.5 | 2023-08-13 | Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2023-39383 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data securi… |
CVE-2023-39382 | High | 7.5 | 2023-08-13 | Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart. |
CVE-2023-39381 | High | 7.5 | 2023-08-13 | Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-39380 | High | 7.5 | 2023-08-13 | Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. |
CVE-2023-3456 | Medium | 5.3 | 2023-07-06 | Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-37245 | Critical | 9.1 | 2023-07-06 | Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem. |
CVE-2023-37242 | Critical | 9.8 | 2023-07-06 | Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile rand… |
CVE-2023-37241 | High | 7.5 | 2023-07-06 | Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-37240 | Critical | 9.1 | 2023-07-06 | Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read… |
CVE-2023-37239 | High | 7.5 | 2023-07-06 | Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program. |
CVE-2023-37238 | Medium | 5.3 | 2023-07-06 | Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulner… |
CVE-2023-34164 | High | 7.5 | 2023-07-06 | Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availa… |
CVE-2023-1695 | High | 7.5 | 2023-07-06 | Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2023-1691 | High | 7.5 | 2023-07-06 | Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2022-48520 | High | 7.5 | 2023-07-06 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48519 | High | 7.5 | 2023-07-06 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48518 | Medium | 5.5 | 2023-07-06 | Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation… |
CVE-2022-48517 | High | 7.5 | 2023-07-06 | Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48516 | High | 7.5 | 2023-07-06 | Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confid… |
CVE-2022-48515 | High | 7.5 | 2023-07-06 | Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2022-48514 | High | 7.5 | 2023-07-06 | The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48513 | Critical | 9.8 | 2023-07-06 | Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2022-48512 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perfor… |
CVE-2022-48511 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio featu… |
CVE-2022-48510 | Critical | 9.8 | 2023-07-06 | Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. |
CVE-2022-48509 | Medium | 5.9 | 2023-07-06 | Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may caus… |
CVE-2022-48508 | High | 7.5 | 2023-07-06 | Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2022-48507 | High | 7.5 | 2023-07-06 | Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-46894 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation. |
CVE-2021-46892 | High | 7.5 | 2023-07-06 | Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-3455 | Critical | 9.1 | 2023-07-05 | Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity. |
CVE-2021-46893 | High | 7.5 | 2023-07-05 | Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity. |