Huawei
Page 9 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48289 | High | 7.5 | 2023-02-09 | The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-48288 | High | 7.5 | 2023-02-09 | The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-48287 | High | 7.5 | 2023-02-09 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-48286 | High | 7.5 | 2023-02-09 | The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-47976 | High | 7.5 | 2023-01-06 | The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may… |
CVE-2022-47975 | High | 7.5 | 2023-01-06 | The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-47974 | Medium | 6.5 | 2023-01-06 | The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to re… |
CVE-2022-46762 | High | 7.5 | 2023-01-06 | The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-46761 | High | 7.5 | 2023-01-06 | The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hidin… |
CVE-2021-46868 | High | 7.5 | 2023-01-06 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2021-46867 | High | 7.5 | 2023-01-06 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2022-46740 | Medium | 6.5 | 2022-12-28 | There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful exploit could cause a denial of service (Do… |
CVE-2022-45874 | Medium | 5.5 | 2022-12-28 | Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file. |
CVE-2022-44564 | High | 7.8 | 2022-12-28 | Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources. |
CVE-2022-41579 | Medium | 6.5 | 2022-12-28 | There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the ba… |
CVE-2022-39012 | High | 7.5 | 2022-12-28 | Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal. |
CVE-2022-46328 | High | 7.5 | 2022-12-20 | Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-46327 | Critical | 9.8 | 2022-12-20 | Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service excep… |
CVE-2022-46326 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46325 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46324 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46323 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46322 | High | 7.5 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46321 | High | 7.5 | 2022-12-20 | The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-46320 | Critical | 9.8 | 2022-12-20 | The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-46319 | Critical | 9.8 | 2022-12-20 | Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write. |
CVE-2022-46318 | Medium | 5.3 | 2022-12-20 | The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings. |
CVE-2022-46317 | High | 7.5 | 2022-12-20 | The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-46316 | Critical | 9.8 | 2022-12-20 | A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may affect data integrity, confidentiality… |
CVE-2022-46315 | High | 7.5 | 2022-12-20 | The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-46314 | High | 7.5 | 2022-12-20 | The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-46313 | Medium | 5.3 | 2022-12-20 | The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camer… |
CVE-2022-46312 | High | 7.5 | 2022-12-20 | The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of devi… |
CVE-2022-46311 | High | 7.5 | 2022-12-20 | The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-46310 | High | 7.5 | 2022-12-20 | The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-41599 | High | 7.5 | 2022-12-20 | The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-41596 | High | 7.5 | 2022-12-20 | The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components. |
CVE-2022-41591 | High | 7.5 | 2022-12-20 | The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files. |
CVE-2022-41590 | Medium | 5.5 | 2022-12-20 | Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vu… |
CVE-2021-46856 | High | 7.5 | 2022-12-20 | The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44563 | Medium | 5.9 | 2022-11-09 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44562 | Critical | 9.8 | 2022-11-09 | The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege esc… |
CVE-2022-44561 | High | 7.5 | 2022-11-09 | The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary wid… |
CVE-2022-44560 | Medium | 5.3 | 2022-11-09 | The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified. |
CVE-2022-44559 | Critical | 9.8 | 2022-11-09 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-44558 | Critical | 9.8 | 2022-11-09 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-44557 | High | 7.5 | 2022-11-09 | The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vul… |
CVE-2022-44555 | High | 7.5 | 2022-11-09 | The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable. |
CVE-2022-44554 | High | 7.5 | 2022-11-09 | The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the dev… |
CVE-2022-44553 | Medium | 5.3 | 2022-11-09 | The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploita… |
CVE-2022-44552 | High | 7.5 | 2022-11-09 | The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-44551 | Critical | 9.8 | 2022-11-09 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availabilit… |
CVE-2022-44550 | High | 7.5 | 2022-11-09 | The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availabilit… |
CVE-2022-44549 | High | 7.5 | 2022-11-09 | The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing… |
CVE-2022-44548 | Medium | 4.3 | 2022-11-09 | There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog bo… |
CVE-2022-44547 | High | 7.5 | 2022-11-09 | The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability. |
CVE-2022-44546 | High | 7.5 | 2022-11-09 | The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerabili… |
CVE-2021-46852 | High | 7.5 | 2022-11-09 | The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-46851 | Critical | 9.8 | 2022-11-09 | The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback. |
CVE-2022-44556 | High | 7.5 | 2022-11-08 | Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability. |
CVE-2022-41603 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41602 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41601 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41600 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41598 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41597 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41595 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41594 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41593 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41592 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41589 | High | 7.5 | 2022-10-14 | The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services a… |
CVE-2022-41588 | High | 7.5 | 2022-10-14 | The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-41587 | Medium | 5.3 | 2022-10-14 | Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability. |
CVE-2022-41586 | High | 7.5 | 2022-10-14 | The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-41585 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-41584 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-41583 | High | 7.5 | 2022-10-14 | The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect s… |
CVE-2022-41582 | High | 7.5 | 2022-10-14 | The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-41581 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of da… |
CVE-2022-41580 | Critical | 9.8 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of da… |
CVE-2022-41578 | Critical | 9.8 | 2022-10-14 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented… |
CVE-2022-41577 | High | 7.1 | 2022-10-14 | The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may c… |
CVE-2022-41576 | High | 7.8 | 2022-10-14 | The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted o… |
CVE-2022-39011 | High | 7.5 | 2022-10-14 | The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38998 | High | 7.5 | 2022-10-14 | The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-b… |
CVE-2022-38986 | Critical | 9.1 | 2022-10-14 | The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38985 | High | 7.5 | 2022-10-14 | The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38984 | High | 7.5 | 2022-10-14 | The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-b… |
CVE-2022-38983 | Critical | 9.8 | 2022-10-14 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. |
CVE-2022-38982 | Critical | 9.8 | 2022-10-14 | The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked. |
CVE-2022-38981 | High | 7.5 | 2022-10-14 | The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. |
CVE-2022-38980 | Critical | 9.8 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may… |
CVE-2022-38977 | High | 7.5 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification… |
CVE-2021-46840 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicio… |
CVE-2021-46839 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of… |
CVE-2022-37395 | High | 7.5 | 2022-09-20 | A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions includ… |
CVE-2022-33735 | Medium | 6.5 | 2022-09-20 | There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause s… |
CVE-2021-46835 | Medium | 4.3 | 2022-09-20 | There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. |
CVE-2021-46834 | Medium | 5.5 | 2022-09-20 | A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected p… |
CVE-2020-36602 | Medium | 6.1 | 2022-09-20 | There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed me… |