Huawei Security Vulnerabilities (CVEs)

A path traversal vulnerability in the DFS module allows attackers to access files outside the intended directory. This affects Huawei products using t...

This CVE describes an access control vulnerability in Huawei's security verification module that allows attackers to bypass authentication mechanisms....

This CVE describes a memory write permission bypass vulnerability in the Linux kernel's futex (fast userspace mutex) module. Attackers could potential...

A buffer overflow vulnerability exists in the SVG parsing module of Huawei's ArkUI framework. Successful exploitation could cause denial of service by...

This CVE describes an access control vulnerability in Huawei's security verification module that allows attackers to bypass authentication mechanisms....

This CVE describes an authentication bypass vulnerability in Huawei's security verification module that allows attackers to circumvent access controls...

This vulnerability involves improper resource management in memory management modules, potentially causing system instability or crashes. It primarily...

This vulnerability in the ArkUI framework's SVG parsing module allows attackers to cause denial of service by exploiting exception capture failures. I...

A buffer overflow vulnerability in the codec module could allow attackers to crash affected systems, potentially causing denial of service. This affec...

A buffer overflow vulnerability exists in the codec module that could allow attackers to crash affected systems by sending specially crafted data. Thi...

A permission management vulnerability in Huawei device lock screen modules could allow unauthorized access to protected services. This affects Huawei ...

This CVE describes a multi-threading race condition vulnerability in Huawei's package management module that could allow an attacker to cause denial o...

This vulnerability involves improper access permissions in Huawei's HDC module, allowing unauthorized access to sensitive service data. It affects Hua...

This CVE describes a permission verification bypass vulnerability in Huawei's notification module that allows attackers to bypass intended access cont...

A Use-After-Free vulnerability in the display module allows attackers to exploit memory corruption after memory has been freed. This could lead to abn...

This CVE describes an input verification vulnerability in Huawei's ExternalStorageProvider module that could allow attackers to access sensitive infor...

This CVE describes an out-of-bounds write vulnerability in the emcom module of Huawei devices. Successful exploitation could allow attackers to corrup...

A permission verification vulnerability in Huawei's media library module allows unauthorized access to protected media content. This affects Huawei de...

This vulnerability involves improper log information control in Huawei's UI framework module, allowing unauthorized access to sensitive log data. It a...

This vulnerability allows attackers to crash systems by sending malformed glTF 3D model files to unpatched software. It affects any application using ...

This vulnerability allows attackers to crash systems by sending malformed glTF 3D model files to unpatched software. It affects any application using ...

This vulnerability allows improper access control in the home screen widget module, potentially enabling attackers to disrupt device availability. It ...

A buffer overflow vulnerability in a driver module allows attackers to crash affected systems, potentially causing denial of service. This affects Hua...

An integer overflow vulnerability in the glTF model loading component of a 3D engine module allows attackers to cause denial of service by crashing th...

This vulnerability allows attackers to crash applications by providing malicious glTF 3D model files that trigger buffer overflows during parsing. It ...

This vulnerability involves improper permission control in the window management module, allowing unauthorized access to sensitive information. It aff...

This CVE describes an access control vulnerability in Huawei's identity authentication module that could allow unauthorized access to sensitive inform...

A permission control vulnerability in Huawei's Connectivity module allows unauthorized access to restricted functionality. This affects Huawei devices...

This vulnerability involves improper implementation of native APIs in the NFC service module, allowing attackers to cause abnormal behavior in NFC fea...

This CVE describes a cross-process screen stack vulnerability in Huawei's UIExtension module that could allow unauthorized access to screen content ac...

This CVE describes an instruction authentication bypass vulnerability in Huawei's Findnetwork module that allows attackers to bypass authentication me...

This vulnerability involves improper permission control in the Gallery module, allowing unauthorized access to gallery functions. Successful exploitat...

This CVE describes a race condition vulnerability in a distributed notification module that could cause abnormal feature behavior when exploited. It a...

This vulnerability in Huawei's HUKS (Hardware Unified Key Store) module allows improper memory address protection, potentially leading to denial of se...

This CVE describes a use-after-free vulnerability in the device node access module of Huawei devices. Successful exploitation could cause service exce...

This CVE describes a cross-process screen stack vulnerability in Huawei's UIExtension module that could allow unauthorized access to screen content ac...

A connection hijacking vulnerability in certain Huawei home routers allows attackers to intercept or disrupt network connections. This affects users o...

This vulnerability allows attackers to bypass authentication mechanisms in Huawei HiLink AI Life products. Attackers could potentially access restrict...

This vulnerability in Huawei wearables allows attackers to cause server out-of-memory conditions by sending specially crafted data that exceeds expect...

A stack overflow vulnerability in certain Huawei smartphones allows attackers to craft specific packets to exploit insufficient input validation. Succ...

This is a local privilege escalation vulnerability in Huawei FusionCompute products. Attackers with local access can exploit insufficient deserializat...

This vulnerability in Huawei products allows attackers to physically install malware due to insufficient integrity checks in a specific module. Exploi...

A NULL pointer dereference vulnerability in certain Huawei products allows attackers to cause denial of service by sending specially crafted POST mess...

This is a local privilege escalation vulnerability in Huawei smartphones that allows authenticated local attackers to gain elevated privileges. Attack...

Huawei printers have an input validation vulnerability that allows attackers to send specially crafted input to cause service exceptions. This affects...

This vulnerability in Huawei products involves insufficient input validation that could allow attackers to cause service disruption. It affects Huawei...

This CVE describes a cross-process screen stack vulnerability in Huawei's UIExtension module that could allow unauthorized access to screen content ac...

This CVE describes an out-of-bounds access vulnerability in the DASH module during playback, which could cause crashes or service disruption. It prima...

An out-of-bounds read vulnerability in the M3U8 module could allow attackers to read memory beyond allocated buffers. This affects systems using Huawe...