Huawei
Page 9 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48305 | Medium | 5.5 | 2023-02-27 | There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Successful exploitation of this vulnerability m… |
CVE-2022-48284 | Critical | 9.8 | 2023-02-27 | A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could all… |
CVE-2022-48283 | Critical | 9.8 | 2023-02-27 | A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could all… |
CVE-2022-48261 | High | 7.5 | 2023-02-27 | There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to… |
CVE-2022-48260 | High | 7.5 | 2023-02-27 | There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions. |
CVE-2022-48259 | Critical | 9.8 | 2023-02-27 | There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges. |
CVE-2022-48255 | Critical | 9.8 | 2023-02-27 | There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploi… |
CVE-2022-48254 | Medium | 4.6 | 2023-02-27 | There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock screen authentication. |
CVE-2022-48230 | High | 7.5 | 2023-02-27 | There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS. |
CVE-2018-7935 | Medium | 5.3 | 2023-02-10 | There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573C… |
CVE-2022-48302 | High | 7.5 | 2023-02-09 | The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48301 | High | 7.5 | 2023-02-09 | The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that… |
CVE-2022-48300 | High | 7.5 | 2023-02-09 | The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48299 | High | 7.5 | 2023-02-09 | The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48298 | High | 7.5 | 2023-02-09 | The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. |
CVE-2022-48297 | High | 7.5 | 2023-02-09 | The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bo… |
CVE-2022-48296 | Medium | 5.3 | 2023-02-09 | The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious a… |
CVE-2022-48295 | High | 7.5 | 2023-02-09 | The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of… |
CVE-2022-48294 | High | 7.5 | 2023-02-09 | The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48293 | Medium | 6.5 | 2023-02-09 | The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48292 | Medium | 6.5 | 2023-02-09 | The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-48290 | Critical | 9.1 | 2023-02-09 | The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity. |
CVE-2022-48289 | High | 7.5 | 2023-02-09 | The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-48288 | High | 7.5 | 2023-02-09 | The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-48287 | High | 7.5 | 2023-02-09 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-48286 | High | 7.5 | 2023-02-09 | The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-47976 | High | 7.5 | 2023-01-06 | The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may… |
CVE-2022-47975 | High | 7.5 | 2023-01-06 | The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-47974 | Medium | 6.5 | 2023-01-06 | The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to re… |
CVE-2022-46762 | High | 7.5 | 2023-01-06 | The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-46761 | High | 7.5 | 2023-01-06 | The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hidin… |
CVE-2021-46868 | High | 7.5 | 2023-01-06 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2021-46867 | High | 7.5 | 2023-01-06 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2022-46740 | Medium | 6.5 | 2022-12-28 | There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful exploit could cause a denial of service (Do… |
CVE-2022-45874 | Medium | 5.5 | 2022-12-28 | Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file. |
CVE-2022-44564 | High | 7.8 | 2022-12-28 | Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources. |
CVE-2022-41579 | Medium | 6.5 | 2022-12-28 | There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the ba… |
CVE-2022-39012 | High | 7.5 | 2022-12-28 | Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal. |
CVE-2022-46328 | High | 7.5 | 2022-12-20 | Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-46327 | Critical | 9.8 | 2022-12-20 | Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service excep… |
CVE-2022-46326 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46325 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46324 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46323 | Critical | 9.8 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46322 | High | 7.5 | 2022-12-20 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. |
CVE-2022-46321 | High | 7.5 | 2022-12-20 | The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-46320 | Critical | 9.8 | 2022-12-20 | The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-46319 | Critical | 9.8 | 2022-12-20 | Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write. |
CVE-2022-46318 | Medium | 5.3 | 2022-12-20 | The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings. |
CVE-2022-46317 | High | 7.5 | 2022-12-20 | The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-46316 | Critical | 9.8 | 2022-12-20 | A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may affect data integrity, confidentiality… |
CVE-2022-46315 | High | 7.5 | 2022-12-20 | The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-46314 | High | 7.5 | 2022-12-20 | The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-46313 | Medium | 5.3 | 2022-12-20 | The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camer… |
CVE-2022-46312 | High | 7.5 | 2022-12-20 | The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of devi… |
CVE-2022-46311 | High | 7.5 | 2022-12-20 | The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-46310 | High | 7.5 | 2022-12-20 | The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-41599 | High | 7.5 | 2022-12-20 | The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-41596 | High | 7.5 | 2022-12-20 | The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components. |
CVE-2022-41591 | High | 7.5 | 2022-12-20 | The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files. |
CVE-2022-41590 | Medium | 5.5 | 2022-12-20 | Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vu… |
CVE-2021-46856 | High | 7.5 | 2022-12-20 | The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44563 | Medium | 5.9 | 2022-11-09 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44562 | Critical | 9.8 | 2022-11-09 | The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege esc… |
CVE-2022-44561 | High | 7.5 | 2022-11-09 | The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary wid… |
CVE-2022-44560 | Medium | 5.3 | 2022-11-09 | The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified. |
CVE-2022-44559 | Critical | 9.8 | 2022-11-09 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-44558 | Critical | 9.8 | 2022-11-09 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-44557 | High | 7.5 | 2022-11-09 | The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vul… |
CVE-2022-44555 | High | 7.5 | 2022-11-09 | The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable. |
CVE-2022-44554 | High | 7.5 | 2022-11-09 | The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the dev… |
CVE-2022-44553 | Medium | 5.3 | 2022-11-09 | The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploita… |
CVE-2022-44552 | High | 7.5 | 2022-11-09 | The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-44551 | Critical | 9.8 | 2022-11-09 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availabilit… |
CVE-2022-44550 | High | 7.5 | 2022-11-09 | The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availabilit… |
CVE-2022-44549 | High | 7.5 | 2022-11-09 | The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing… |
CVE-2022-44548 | Medium | 4.3 | 2022-11-09 | There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog bo… |
CVE-2022-44547 | High | 7.5 | 2022-11-09 | The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability. |
CVE-2022-44546 | High | 7.5 | 2022-11-09 | The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerabili… |
CVE-2021-46852 | High | 7.5 | 2022-11-09 | The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-46851 | Critical | 9.8 | 2022-11-09 | The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback. |
CVE-2022-44556 | High | 7.5 | 2022-11-08 | Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability. |
CVE-2022-41603 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41602 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41601 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41600 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41598 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41597 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41595 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41594 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41593 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41592 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41589 | High | 7.5 | 2022-10-14 | The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services a… |
CVE-2022-41588 | High | 7.5 | 2022-10-14 | The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-41587 | Medium | 5.3 | 2022-10-14 | Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability. |
CVE-2022-41586 | High | 7.5 | 2022-10-14 | The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-41585 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-41584 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-41583 | High | 7.5 | 2022-10-14 | The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect s… |
CVE-2022-41582 | High | 7.5 | 2022-10-14 | The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability. |