Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Total 1780 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-40017 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 9.8 CRITICAL
The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVE-2022-44556 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 7.5 HIGH
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.
CVE-2022-34740 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-02-04 3.3 LOW 6.5 MEDIUM
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
CVE-2022-34743 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-02-04 5.0 MEDIUM 7.5 HIGH
The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-38983 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 9.8 CRITICAL
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution.
CVE-2022-41594 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 3.4 LOW
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVE-2022-41593 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 3.4 LOW
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVE-2022-41595 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 3.4 LOW
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVE-2022-37007 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-02-04 N/A 7.5 HIGH
The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.
CVE-2022-38977 1 Huawei 1 Harmonyos 2024-02-04 N/A 7.5 HIGH
The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data.
CVE-2021-46852 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 7.5 HIGH
The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-38990 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-02-04 N/A 7.5 HIGH
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
CVE-2021-40030 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-02-04 N/A 7.5 HIGH
The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-38981 1 Huawei 1 Harmonyos 2024-02-04 N/A 7.5 HIGH
The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.
CVE-2022-37006 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 7.5 HIGH
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.
CVE-2021-33643 3 Fedoraproject, Feep, Huawei 3 Fedora, Libtar, Openeuler 2024-02-04 N/A 9.1 CRITICAL
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
CVE-2022-37005 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-02-04 N/A 7.5 HIGH
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-38982 1 Huawei 1 Harmonyos 2024-02-04 N/A 9.8 CRITICAL
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked.
CVE-2022-44548 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 4.3 MEDIUM
There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.
CVE-2022-44562 1 Huawei 2 Emui, Harmonyos 2024-02-04 N/A 9.8 CRITICAL
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.