Huawei
Page 8 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46891 | Critical | 9.8 | 2023-07-05 | Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confiden… |
CVE-2021-46890 | Critical | 9.8 | 2023-07-05 | Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confiden… |
CVE-2023-34167 | Medium | 5.3 | 2023-06-19 | Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the deskto… |
CVE-2023-34166 | High | 7.5 | 2023-06-19 | Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-34163 | High | 7.5 | 2023-06-19 | Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-34162 | High | 7.5 | 2023-06-19 | Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cau… |
CVE-2023-34161 | High | 7.5 | 2023-06-19 | nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-34160 | Medium | 5.3 | 2023-06-19 | Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the deskto… |
CVE-2023-34159 | Critical | 9.8 | 2023-06-19 | Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects avail… |
CVE-2023-34158 | Medium | 5.3 | 2023-06-19 | Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the deskto… |
CVE-2023-34156 | Medium | 5.3 | 2023-06-19 | Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied. |
CVE-2023-34155 | High | 7.5 | 2023-06-19 | Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability. |
CVE-2022-48501 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48500 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48499 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48498 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48497 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48496 | High | 7.5 | 2023-06-19 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to bec… |
CVE-2022-48495 | Medium | 5.3 | 2023-06-19 | Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obt… |
CVE-2022-48494 | High | 7.5 | 2023-06-19 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to bec… |
CVE-2022-48493 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48492 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48491 | Medium | 5.3 | 2023-06-19 | Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at… |
CVE-2022-48490 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48489 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48488 | Medium | 5.3 | 2023-06-19 | Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desk… |
CVE-2022-48487 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48486 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48473 | High | 7.5 | 2023-06-16 | There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnorm… |
CVE-2022-48472 | Critical | 9.8 | 2023-06-16 | A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:B… |
CVE-2022-48471 | High | 7.5 | 2023-06-16 | There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnorm… |
CVE-2022-48469 | Medium | 6.5 | 2023-06-16 | There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. |
CVE-2022-48330 | High | 8.0 | 2023-06-16 | A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause buffer overflow. Affected product versio… |
CVE-2023-34165 | Medium | 5.3 | 2023-06-16 | Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps t… |
CVE-2023-34157 | Critical | 10.0 | 2023-06-16 | Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app. |
CVE-2023-34154 | High | 8.2 | 2023-06-16 | Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windo… |
CVE-2023-31227 | High | 7.5 | 2023-05-26 | The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality. |
CVE-2023-31226 | High | 7.5 | 2023-05-26 | The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-31225 | Low | 3.3 | 2023-05-26 | The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. |
CVE-2023-0117 | Medium | 5.3 | 2023-05-26 | The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may… |
CVE-2023-0116 | High | 7.5 | 2023-05-26 | The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability. |
CVE-2022-48480 | High | 7.5 | 2023-05-26 | Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2022-48479 | Critical | 9.8 | 2023-05-26 | The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions… |
CVE-2022-48478 | Critical | 9.8 | 2023-05-26 | The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial r… |
CVE-2021-46887 | Critical | 9.8 | 2023-05-26 | Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read. |
CVE-2021-46886 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46885 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46884 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46883 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46882 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46881 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-1696 | High | 7.5 | 2023-05-20 | The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-1694 | High | 7.5 | 2023-05-20 | The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-1693 | High | 7.5 | 2023-05-20 | The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-1692 | High | 7.5 | 2023-05-20 | The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48314 | Medium | 6.5 | 2023-04-16 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect co… |
CVE-2022-48313 | Medium | 6.5 | 2023-04-16 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect co… |
CVE-2022-48312 | Critical | 9.1 | 2023-04-16 | The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. |
CVE-2023-26549 | High | 7.5 | 2023-03-27 | The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidenti… |
CVE-2023-26548 | High | 7.5 | 2023-03-27 | The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-26547 | High | 7.8 | 2023-03-27 | The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalat… |
CVE-2022-48361 | Medium | 5.3 | 2023-03-27 | The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD… |
CVE-2022-48360 | High | 7.5 | 2023-03-27 | The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48359 | High | 7.5 | 2023-03-27 | The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentia… |
CVE-2022-48358 | High | 7.4 | 2023-03-27 | The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions. |
CVE-2022-48357 | High | 7.5 | 2023-03-27 | Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel. |
CVE-2022-48356 | High | 7.5 | 2023-03-27 | The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recogn… |
CVE-2022-48355 | Medium | 6.5 | 2023-03-27 | The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. |
CVE-2022-48354 | Medium | 6.5 | 2023-03-27 | The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. |
CVE-2022-48353 | Critical | 9.8 | 2023-03-27 | Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system servic… |
CVE-2022-48352 | High | 7.5 | 2023-03-27 | Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic. |
CVE-2022-48351 | High | 7.5 | 2023-03-27 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability. |
CVE-2022-48350 | High | 7.5 | 2023-03-27 | The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48349 | Critical | 9.1 | 2023-03-27 | The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability. |
CVE-2022-48348 | Critical | 9.1 | 2023-03-27 | The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity. |
CVE-2022-48347 | High | 7.5 | 2023-03-27 | The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48346 | High | 7.5 | 2023-03-27 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48291 | Medium | 6.5 | 2023-03-27 | The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentialit… |
CVE-2022-48305 | Medium | 5.5 | 2023-02-27 | There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Successful exploitation of this vulnerability m… |
CVE-2022-48284 | Critical | 9.8 | 2023-02-27 | A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could all… |
CVE-2022-48283 | Critical | 9.8 | 2023-02-27 | A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could all… |
CVE-2022-48261 | High | 7.5 | 2023-02-27 | There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to… |
CVE-2022-48260 | High | 7.5 | 2023-02-27 | There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions. |
CVE-2022-48259 | Critical | 9.8 | 2023-02-27 | There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges. |
CVE-2022-48255 | Critical | 9.8 | 2023-02-27 | There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploi… |
CVE-2022-48254 | Medium | 4.6 | 2023-02-27 | There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock screen authentication. |
CVE-2022-48230 | High | 7.5 | 2023-02-27 | There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS. |
CVE-2018-7935 | Medium | 5.3 | 2023-02-10 | There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573C… |
CVE-2022-48302 | High | 7.5 | 2023-02-09 | The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48301 | High | 7.5 | 2023-02-09 | The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that… |
CVE-2022-48300 | High | 7.5 | 2023-02-09 | The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48299 | High | 7.5 | 2023-02-09 | The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48298 | High | 7.5 | 2023-02-09 | The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. |
CVE-2022-48297 | High | 7.5 | 2023-02-09 | The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bo… |
CVE-2022-48296 | Medium | 5.3 | 2023-02-09 | The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious a… |
CVE-2022-48295 | High | 7.5 | 2023-02-09 | The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of… |
CVE-2022-48294 | High | 7.5 | 2023-02-09 | The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48293 | Medium | 6.5 | 2023-02-09 | The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48292 | Medium | 6.5 | 2023-02-09 | The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48290 | Critical | 9.1 | 2023-02-09 | The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity. |