Huawei Security Vulnerabilities (CVEs)

CVE-2021-37105 is an improper file upload vulnerability in Huawei FusionCompute virtualization software. Attackers can upload malicious files without ...

CVE-2021-22449 is a logic vulnerability in Huawei Elf-G10HN devices that allows unauthenticated attackers to add users as friends without consent. Thi...

A denial-of-service vulnerability in specific Huawei CloudEngine switches allows attackers to craft malicious packets that cause service disruption. A...

This vulnerability in Huawei smartphones allows local attackers to manipulate system settings externally, potentially leading to kernel code execution...

This CVE describes an integer overflow vulnerability in HarmonyOS that allows local attackers to trigger memory corruption. Attackers could exploit th...

This vulnerability in HarmonyOS allows local attackers to bypass the application trustlist mechanism by externally controlling system settings. Attack...

This CVE describes an integer overflow vulnerability in HarmonyOS that allows local attackers to trigger memory corruption. Attackers could exploit th...

This CVE describes a double free vulnerability in HarmonyOS that allows local attackers to gain root privileges. The vulnerability affects Huawei devi...

This CVE describes a data processing error vulnerability in HarmonyOS that allows local attackers to execute arbitrary kernel code. The vulnerability ...

This CVE describes an input verification vulnerability in Huawei smartphones that allows attackers to cause system resets through improper input valid...

This vulnerability in Huawei smartphones allows attackers to trigger a system reset by exploiting improper exception handling. It affects Huawei smart...

This CVE describes a local privilege escalation vulnerability in specific Huawei networking products. A local attacker with standard user privileges c...

This integer overflow vulnerability in Huawei smartphones allows attackers to access random kernel memory addresses when exploited. It affects Huawei ...

This is a memory buffer overflow vulnerability (CWE-787) affecting Huawei smartphones. Successful exploitation could allow attackers to cause system r...

A heap-based buffer overflow vulnerability in Huawei smartphones allows attackers to bypass authentication mechanisms. This affects Huawei smartphone ...

This vulnerability in Huawei smartphones allows attackers to bypass integrity checks, potentially causing system resets. It affects Huawei smartphone ...

This CVE describes an integer underflow vulnerability in Huawei smartphones' Samgr component, which could allow an attacker to cause a denial-of-servi...

This CVE describes an information disclosure vulnerability in Huawei smartphones that could allow attackers to bypass authentication mechanisms. The v...

This vulnerability in Huawei smartphones involves an incorrect buffer size calculation that could allow attackers to trigger a system reset. It affect...

A missing cryptographic step vulnerability in Huawei smartphones allows attackers to cause denial of service (DoS) to the Samgr service. This affects ...

This CVE describes a memory buffer operation vulnerability in Huawei smartphones that allows attackers to cause denial of service. When exploited, it ...

This configuration defect vulnerability in Huawei smartphones allows attackers to hijack devices and create fake user interfaces to trick users into e...

This CVE describes a memory buffer operation limit vulnerability in Huawei smartphone kernels. Successful exploitation could cause kernel panics and d...

This CVE describes a permission control vulnerability in Huawei smartphones where improper access controls allow unauthorized actions. The vulnerabili...

This CVE describes an improper permission management vulnerability in Huawei smartphones that allows unauthorized access to sensitive services. Succes...

This vulnerability in HarmonyOS allows local attackers to bypass privilege restrictions and gain kernel-level read/write access. It affects devices ru...

This vulnerability in Huawei smartphones allows attackers to compromise security features, potentially exposing confidential service information. It a...

This CVE describes a deserialization vulnerability in Huawei AnyOffice that allows remote code execution. Attackers can send crafted requests to explo...

This vulnerability in Huawei eCNS280_TD devices allows attackers to cause service disruption through improper resource management. Attackers need spec...

This CVE describes an improper authorization vulnerability in Huawei eCNS280 and eSE620X vESS products. Attackers with low-level access can exploit th...

This is an out-of-bounds write vulnerability (CWE-787) in Huawei smartphone image processing components. Attackers could exploit this to cause memory ...

This vulnerability in Huawei smartphones involves improper credentials management that could allow unauthorized access to sensitive data. It affects H...

This CVE describes an Improper Control of Generation of Code vulnerability in Huawei smartphones that allows attackers to execute arbitrary code on ro...

This Huawei smartphone security function vulnerability allows attackers to compromise data confidentiality when exploited. The vulnerability affects H...

An information disclosure vulnerability in certain Huawei smartphones allows unauthorized access to sensitive data. This affects users of specific Hua...

This is a denial-of-service vulnerability affecting specific Huawei S5700 and S6700 switch models. An attacker can send specially crafted messages to ...

A double free vulnerability in Huawei CloudEngine switches allows attackers to cause memory corruption by freeing the same pointer twice. This can lea...