Filtered by vendor Huawei
Subscribe
Total
1780 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-40017 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 9.8 CRITICAL |
The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access. | |||||
CVE-2022-44556 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 7.5 HIGH |
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability. | |||||
CVE-2022-34740 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-02-04 | 3.3 LOW | 6.5 MEDIUM |
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. | |||||
CVE-2022-34743 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. | |||||
CVE-2022-38983 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 9.8 CRITICAL |
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. | |||||
CVE-2022-41594 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 3.4 LOW |
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | |||||
CVE-2022-41593 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 3.4 LOW |
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | |||||
CVE-2022-41595 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 3.4 LOW |
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | |||||
CVE-2022-37007 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-02-04 | N/A | 7.5 HIGH |
The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. | |||||
CVE-2022-38977 | 1 Huawei | 1 Harmonyos | 2024-02-04 | N/A | 7.5 HIGH |
The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data. | |||||
CVE-2021-46852 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 7.5 HIGH |
The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | |||||
CVE-2022-38990 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-02-04 | N/A | 7.5 HIGH |
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. | |||||
CVE-2021-40030 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-02-04 | N/A | 7.5 HIGH |
The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality. | |||||
CVE-2022-38981 | 1 Huawei | 1 Harmonyos | 2024-02-04 | N/A | 7.5 HIGH |
The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. | |||||
CVE-2022-37006 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 7.5 HIGH |
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability. | |||||
CVE-2021-33643 | 3 Fedoraproject, Feep, Huawei | 3 Fedora, Libtar, Openeuler | 2024-02-04 | N/A | 9.1 CRITICAL |
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. | |||||
CVE-2022-37005 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-02-04 | N/A | 7.5 HIGH |
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | |||||
CVE-2022-38982 | 1 Huawei | 1 Harmonyos | 2024-02-04 | N/A | 9.8 CRITICAL |
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked. | |||||
CVE-2022-44548 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 4.3 MEDIUM |
There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing. | |||||
CVE-2022-44562 | 1 Huawei | 2 Emui, Harmonyos | 2024-02-04 | N/A | 9.8 CRITICAL |
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |