Huawei
Page 8 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37238 | Medium | 5.3 | 2023-07-06 | Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulner… |
CVE-2023-34164 | High | 7.5 | 2023-07-06 | Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availa… |
CVE-2023-1695 | High | 7.5 | 2023-07-06 | Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2023-1691 | High | 7.5 | 2023-07-06 | Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2022-48520 | High | 7.5 | 2023-07-06 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48519 | High | 7.5 | 2023-07-06 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48518 | Medium | 5.5 | 2023-07-06 | Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation… |
CVE-2022-48517 | High | 7.5 | 2023-07-06 | Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48516 | High | 7.5 | 2023-07-06 | Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confid… |
CVE-2022-48515 | High | 7.5 | 2023-07-06 | Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2022-48514 | High | 7.5 | 2023-07-06 | The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48513 | Critical | 9.8 | 2023-07-06 | Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2022-48512 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perfor… |
CVE-2022-48511 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio featu… |
CVE-2022-48510 | Critical | 9.8 | 2023-07-06 | Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. |
CVE-2022-48509 | Medium | 5.9 | 2023-07-06 | Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may caus… |
CVE-2022-48508 | High | 7.5 | 2023-07-06 | Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2022-48507 | High | 7.5 | 2023-07-06 | Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-46894 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation. |
CVE-2021-46892 | High | 7.5 | 2023-07-06 | Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-3455 | Critical | 9.1 | 2023-07-05 | Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity. |
CVE-2021-46893 | High | 7.5 | 2023-07-05 | Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity. |
CVE-2021-46891 | Critical | 9.8 | 2023-07-05 | Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confiden… |
CVE-2021-46890 | Critical | 9.8 | 2023-07-05 | Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confiden… |
CVE-2023-34167 | Medium | 5.3 | 2023-06-19 | Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the deskto… |
CVE-2023-34166 | High | 7.5 | 2023-06-19 | Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-34163 | High | 7.5 | 2023-06-19 | Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-34162 | High | 7.5 | 2023-06-19 | Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cau… |
CVE-2023-34161 | High | 7.5 | 2023-06-19 | nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-34160 | Medium | 5.3 | 2023-06-19 | Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the deskto… |
CVE-2023-34159 | Critical | 9.8 | 2023-06-19 | Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects avail… |
CVE-2023-34158 | Medium | 5.3 | 2023-06-19 | Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the deskto… |
CVE-2023-34156 | Medium | 5.3 | 2023-06-19 | Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied. |
CVE-2023-34155 | High | 7.5 | 2023-06-19 | Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability. |
CVE-2022-48501 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48500 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48499 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48498 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48497 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48496 | High | 7.5 | 2023-06-19 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to bec… |
CVE-2022-48495 | Medium | 5.3 | 2023-06-19 | Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obt… |
CVE-2022-48494 | High | 7.5 | 2023-06-19 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to bec… |
CVE-2022-48493 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48492 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48491 | Medium | 5.3 | 2023-06-19 | Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at… |
CVE-2022-48490 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48489 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48488 | Medium | 5.3 | 2023-06-19 | Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desk… |
CVE-2022-48487 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48486 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48473 | High | 7.5 | 2023-06-16 | There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnorm… |
CVE-2022-48472 | Critical | 9.8 | 2023-06-16 | A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:B… |
CVE-2022-48471 | High | 7.5 | 2023-06-16 | There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnorm… |
CVE-2022-48469 | Medium | 6.5 | 2023-06-16 | There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. |
CVE-2022-48330 | High | 8.0 | 2023-06-16 | A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause buffer overflow. Affected product versio… |
CVE-2023-34165 | Medium | 5.3 | 2023-06-16 | Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps t… |
CVE-2023-34157 | Critical | 10.0 | 2023-06-16 | Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app. |
CVE-2023-34154 | High | 8.2 | 2023-06-16 | Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windo… |
CVE-2023-31227 | High | 7.5 | 2023-05-26 | The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality. |
CVE-2023-31226 | High | 7.5 | 2023-05-26 | The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-31225 | Low | 3.3 | 2023-05-26 | The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. |
CVE-2023-0117 | Medium | 5.3 | 2023-05-26 | The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may… |
CVE-2023-0116 | High | 7.5 | 2023-05-26 | The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability. |
CVE-2022-48480 | High | 7.5 | 2023-05-26 | Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2022-48479 | Critical | 9.8 | 2023-05-26 | The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions… |
CVE-2022-48478 | Critical | 9.8 | 2023-05-26 | The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial r… |
CVE-2021-46887 | Critical | 9.8 | 2023-05-26 | Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read. |
CVE-2021-46886 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46885 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46884 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46883 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46882 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46881 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-1696 | High | 7.5 | 2023-05-20 | The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-1694 | High | 7.5 | 2023-05-20 | The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-1693 | High | 7.5 | 2023-05-20 | The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-1692 | High | 7.5 | 2023-05-20 | The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48314 | Medium | 6.5 | 2023-04-16 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect co… |
CVE-2022-48313 | Medium | 6.5 | 2023-04-16 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect co… |
CVE-2022-48312 | Critical | 9.1 | 2023-04-16 | The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. |
CVE-2023-26549 | High | 7.5 | 2023-03-27 | The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidenti… |
CVE-2023-26548 | High | 7.5 | 2023-03-27 | The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-26547 | High | 7.8 | 2023-03-27 | The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalat… |
CVE-2022-48361 | Medium | 5.3 | 2023-03-27 | The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD… |
CVE-2022-48360 | High | 7.5 | 2023-03-27 | The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48359 | High | 7.5 | 2023-03-27 | The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentia… |
CVE-2022-48358 | High | 7.4 | 2023-03-27 | The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions. |
CVE-2022-48357 | High | 7.5 | 2023-03-27 | Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel. |
CVE-2022-48356 | High | 7.5 | 2023-03-27 | The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recogn… |
CVE-2022-48355 | Medium | 6.5 | 2023-03-27 | The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. |
CVE-2022-48354 | Medium | 6.5 | 2023-03-27 | The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. |
CVE-2022-48353 | Critical | 9.8 | 2023-03-27 | Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system servic… |
CVE-2022-48352 | High | 7.5 | 2023-03-27 | Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic. |
CVE-2022-48351 | High | 7.5 | 2023-03-27 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability. |
CVE-2022-48350 | High | 7.5 | 2023-03-27 | The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48349 | Critical | 9.1 | 2023-03-27 | The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability. |
CVE-2022-48348 | Critical | 9.1 | 2023-03-27 | The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity. |
CVE-2022-48347 | High | 7.5 | 2023-03-27 | The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48346 | High | 7.5 | 2023-03-27 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48291 | Medium | 6.5 | 2023-03-27 | The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentialit… |