Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Total 951 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-46868 1 Huawei 2 Emui, Harmonyos 2025-04-10 N/A 7.5 HIGH
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVE-2021-46867 1 Huawei 2 Emui, Harmonyos 2025-04-10 N/A 7.5 HIGH
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVE-2022-46762 1 Huawei 2 Emui, Harmonyos 2025-04-09 N/A 7.5 HIGH
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46761 1 Huawei 2 Emui, Harmonyos 2025-04-09 N/A 7.5 HIGH
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.
CVE-2022-47976 1 Huawei 2 Emui, Harmonyos 2025-04-09 N/A 7.5 HIGH
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.
CVE-2022-47975 1 Huawei 2 Emui, Harmonyos 2025-04-09 N/A 7.5 HIGH
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.
CVE-2009-2272 1 Huawei 2 D100, D100 Firmware 2025-04-09 5.0 MEDIUM 7.5 HIGH
The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.
CVE-2019-2215 5 Canonical, Debian, Google and 2 more 145 Ubuntu Linux, Debian Linux, Android and 142 more 2025-04-04 4.6 MEDIUM 7.8 HIGH
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2020-0069 2 Google, Huawei 57 Android, Berkeley-l09, Berkeley-l09 Firmware and 54 more 2025-04-04 7.2 HIGH 7.8 HIGH
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
CVE-2021-33658 2 Huawei, Openatom 2 Atune, Openeuler 2025-04-02 4.6 MEDIUM 7.8 HIGH
atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.
CVE-2024-30417 1 Huawei 2 Emui, Harmonyos 2025-03-29 N/A 7.5 HIGH
Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52540 1 Huawei 2 Emui, Harmonyos 2025-03-28 N/A 7.5 HIGH
Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-30413 1 Huawei 2 Emui, Harmonyos 2025-03-28 N/A 7.5 HIGH
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-27895 1 Huawei 1 Harmonyos 2025-03-28 N/A 7.5 HIGH
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
CVE-2023-52546 1 Huawei 2 Emui, Harmonyos 2025-03-28 N/A 7.5 HIGH
Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52715 1 Huawei 1 Harmonyos 2025-03-28 N/A 7.5 HIGH
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2023-52386 1 Huawei 2 Emui, Harmonyos 2025-03-27 N/A 7.5 HIGH
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-52359 1 Huawei 2 Emui, Harmonyos 2025-03-27 N/A 7.5 HIGH
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-52373 1 Huawei 2 Emui, Harmonyos 2025-03-27 N/A 7.5 HIGH
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.
CVE-2023-52387 1 Huawei 2 Emui, Harmonyos 2025-03-27 N/A 7.5 HIGH
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.