# cve.now: Huawei

The newest entries naming Huawei as an affected vendor (up to 200), of 1,420 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-101184](https://cve.now/CVE-2026-101184.md): Permission control vulnerability in the Bluetooth module. (CVSS 5.5)
- [CVE-2026-101178](https://cve.now/CVE-2026-101178.md): Permission control vulnerability in the autofill service module. (CVSS 6.6)
- [CVE-2026-101177](https://cve.now/CVE-2026-101177.md): Permission control vulnerability in the Optimizer module. (CVSS 3.7)
- [CVE-2026-101174](https://cve.now/CVE-2026-101174.md): DoS vulnerability in the DSoftBus module. (CVSS 5.7)
- [CVE-2026-101173](https://cve.now/CVE-2026-101173.md): DoS vulnerability in the DSoftBus module. (CVSS 6.5)
- [CVE-2026-101176](https://cve.now/CVE-2026-101176.md): Permission control vulnerability in the event notification management module. (CVSS 7.1)
- [CVE-2026-101186](https://cve.now/CVE-2026-101186.md): DoS vulnerability in the window module. (CVSS 7.5)
- [CVE-2026-101185](https://cve.now/CVE-2026-101185.md): OOB read vulnerability in the peripheral module. (CVSS 5.9)
- [CVE-2026-101183](https://cve.now/CVE-2026-101183.md): UAF vulnerability in the location service module. (CVSS 5.9)
- [CVE-2026-101182](https://cve.now/CVE-2026-101182.md): Race condition vulnerability in the location service module. (CVSS 5.9)
- [CVE-2026-101181](https://cve.now/CVE-2026-101181.md): Permission control vulnerability in the WLAN module. (CVSS 5.5)
- [CVE-2026-101180](https://cve.now/CVE-2026-101180.md): DoS vulnerability in the file parsing module. (CVSS 4.3)
- [CVE-2026-101179](https://cve.now/CVE-2026-101179.md): Buffer overflow vulnerability in the file preview module. (CVSS 4.7)
- [CVE-2026-101175](https://cve.now/CVE-2026-101175.md): Null pointer dereference vulnerability in the ArkWeb module. (CVSS 4.3)
- [CVE-2026-101171](https://cve.now/CVE-2026-101171.md): Permission control vulnerability in the background task management module. (CVSS 3.6)
- [CVE-2026-101170](https://cve.now/CVE-2026-101170.md): DoS vulnerability in the file parsing module. (CVSS 4.0)
- [CVE-2026-101172](https://cve.now/CVE-2026-101172.md): Permission control vulnerability in the graphics module. (CVSS 6.2)
- [CVE-2026-65200](https://cve.now/CVE-2026-65200.md): Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses (CVSS 3.5)
- [CVE-2026-65199](https://cve.now/CVE-2026-65199.md): Huawei openUBMC low-privilege SNMP to administrator privilege escalation (CVSS 5.4)
- [CVE-2026-65198](https://cve.now/CVE-2026-65198.md): Huawei Default SNMPv3 USM key (CVSS 8.6)
- [CVE-2026-81645](https://cve.now/CVE-2026-81645.md): Out-of-bounds read vulnerability in the graphics module. (CVSS 5.9)
- [CVE-2026-49313](https://cve.now/CVE-2026-49313.md): Permission control vulnerability in the app lock module. (CVSS 5.5)
- [CVE-2026-49309](https://cve.now/CVE-2026-49309.md): Permission control vulnerability in the Settings module. (CVSS 4.8)
- [CVE-2026-41987](https://cve.now/CVE-2026-41987.md): Permission control vulnerability in the app management module. (CVSS 6.2)
- [CVE-2026-49315](https://cve.now/CVE-2026-49315.md): DoS vulnerability in the input device module. (CVSS 7.1)
- [CVE-2026-81647](https://cve.now/CVE-2026-81647.md): Out-of-bounds read vulnerability in the graphics module. (CVSS 5.3)
- [CVE-2026-81646](https://cve.now/CVE-2026-81646.md): Out-of-bounds read vulnerability in the graphics module. (CVSS 5.9)
- [CVE-2026-81644](https://cve.now/CVE-2026-81644.md): DoS vulnerability in the preview service module. (CVSS 4.3)
- [CVE-2026-49312](https://cve.now/CVE-2026-49312.md): Permission control vulnerability in the window module. (CVSS 4.0)
- [CVE-2026-49310](https://cve.now/CVE-2026-49310.md): Permission control vulnerability in the event notification module. (CVSS 8.6)
- [CVE-2026-49314](https://cve.now/CVE-2026-49314.md): OOB write vulnerability in the rendering and composition module. (CVSS 7.3)
- [CVE-2026-49311](https://cve.now/CVE-2026-49311.md): Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availabil (CVSS 6.2)
- [CVE-2026-49303](https://cve.now/CVE-2026-49303.md): Permission control vulnerability in the notification module. (CVSS 5.1)
- [CVE-2026-49301](https://cve.now/CVE-2026-49301.md): Permission control vulnerability in the Gallery module. (CVSS 6.2)
- [CVE-2026-49305](https://cve.now/CVE-2026-49305.md): Permission control vulnerability in the Wi-Fi enhancement module. (CVSS 6.2)
- [CVE-2026-49308](https://cve.now/CVE-2026-49308.md): Permission control vulnerability in the clipboard module. (CVSS 5.5)
- [CVE-2026-49306](https://cve.now/CVE-2026-49306.md): UAF vulnerability in the time and time zone module. (CVSS 3.3)
- [CVE-2026-49304](https://cve.now/CVE-2026-49304.md): Permission control vulnerability in the device key management module. (CVSS 6.2)
- [CVE-2026-49302](https://cve.now/CVE-2026-49302.md): Permission control vulnerability in the notification service module. (CVSS 6.2)
- [CVE-2026-58561](https://cve.now/CVE-2026-58561.md): Null pointer dereference issue in the image codec module. (CVSS 4.0)
- [CVE-2026-58560](https://cve.now/CVE-2026-58560.md): Null pointer dereference issue in the image codec module. (CVSS 4.0)
- [CVE-2026-49307](https://cve.now/CVE-2026-49307.md): Permission control vulnerability in the multi-mode input module. (CVSS 6.2)
- [CVE-2026-58559](https://cve.now/CVE-2026-58559.md): DoS vulnerability in the vibration service. (CVSS 6.5)
- [CVE-2026-58558](https://cve.now/CVE-2026-58558.md): Permission control vulnerability in the file system. (CVSS 7.8)
- [CVE-2026-58556](https://cve.now/CVE-2026-58556.md): Permission control vulnerability in the Bluetooth module. (CVSS 5.1)
- [CVE-2026-58557](https://cve.now/CVE-2026-58557.md): Design defect vulnerability in Expedition mode. (CVSS 4.8)
- [CVE-2026-58554](https://cve.now/CVE-2026-58554.md): Permission control vulnerability in the Settings module. (CVSS 6.6)
- [CVE-2026-58555](https://cve.now/CVE-2026-58555.md): Permission bypass vulnerability in the card module. (CVSS 6.6)
- [CVE-2026-58553](https://cve.now/CVE-2026-58553.md): Out-of-bounds read vulnerability in the image codec module. (CVSS 4.0)
- [CVE-2026-58552](https://cve.now/CVE-2026-58552.md): Out-of-bounds read vulnerability in the image codec module. (CVSS 5.1)
- [CVE-2026-58551](https://cve.now/CVE-2026-58551.md): Out-of-bounds read vulnerability in the image codec module. (CVSS 5.1)
- [CVE-2026-58550](https://cve.now/CVE-2026-58550.md): Out-of-bounds read vulnerability in the image codec module. (CVSS 4.0)
- [CVE-2026-58549](https://cve.now/CVE-2026-58549.md): Out-of-bounds read vulnerability in the image codec module. (CVSS 4.0)
- [CVE-2026-41982](https://cve.now/CVE-2026-41982.md): Race condition vulnerability in the IPC module. (CVSS 6.4)
- [CVE-2026-41981](https://cve.now/CVE-2026-41981.md): Out-of-bounds write vulnerability in the IPC module. (CVSS 5.3)
- [CVE-2026-41977](https://cve.now/CVE-2026-41977.md): DoS vulnerability in the log service. (CVSS 5.0)
- [CVE-2026-41976](https://cve.now/CVE-2026-41976.md): Permission control vulnerability in the audio framework. (CVSS 6.6)
- [CVE-2026-41974](https://cve.now/CVE-2026-41974.md): Permission control vulnerability in service notifications. (CVSS 3.6)
- [CVE-2026-41973](https://cve.now/CVE-2026-41973.md): Permission control vulnerability in calls. (CVSS 5.9)
- [CVE-2026-41972](https://cve.now/CVE-2026-41972.md): Path traversal vulnerability in the SMS app. (CVSS 5.4)
- [CVE-2026-41986](https://cve.now/CVE-2026-41986.md): Logic bypass vulnerability in the file system. (CVSS 2.4)
- [CVE-2026-41985](https://cve.now/CVE-2026-41985.md): UAF vulnerability in the package management module. (CVSS 5.1)
- [CVE-2026-41984](https://cve.now/CVE-2026-41984.md): UAF vulnerability in the package management module. (CVSS 5.2)
- [CVE-2026-41983](https://cve.now/CVE-2026-41983.md): Null pointer dereference vulnerability in the browser module. (CVSS 4.3)
- [CVE-2026-41980](https://cve.now/CVE-2026-41980.md): Permission control vulnerability in the file preview module. (CVSS 5.5)
- [CVE-2026-41979](https://cve.now/CVE-2026-41979.md): Permission control vulnerability in the print module. (CVSS 5.5)
- [CVE-2026-41978](https://cve.now/CVE-2026-41978.md): Permission control vulnerability in the clone module. (CVSS 4.4)
- [CVE-2026-41975](https://cve.now/CVE-2026-41975.md): Permission management vulnerability in the network management module. (CVSS 6.3)
- [CVE-2026-41970](https://cve.now/CVE-2026-41970.md): Out-of-bounds write vulnerability in the distributed file system module. (CVSS 6.8)
- [CVE-2026-41969](https://cve.now/CVE-2026-41969.md): Permission control vulnerability in the projection module. (CVSS 6.2)
- [CVE-2026-41968](https://cve.now/CVE-2026-41968.md): Permission control vulnerability in the manufacturability design module. (CVSS 5.9)
- [CVE-2026-41967](https://cve.now/CVE-2026-41967.md): Permission control vulnerability in the manufacturability design module. (CVSS 5.9)
- [CVE-2026-41966](https://cve.now/CVE-2026-41966.md): Permission control vulnerability in the smart sensing service. (CVSS 5.6)
- [CVE-2026-41962](https://cve.now/CVE-2026-41962.md): Permission control vulnerability in the app management and control module. (CVSS 3.6)
- [CVE-2026-41961](https://cve.now/CVE-2026-41961.md): Permission control vulnerability in contacts. (CVSS 5.9)
- [CVE-2026-41960](https://cve.now/CVE-2026-41960.md): Permission control vulnerability in calls. (CVSS 5.8)
- [CVE-2026-41971](https://cve.now/CVE-2026-41971.md): Permission control vulnerability in the security control module. (CVSS 5.5)
- [CVE-2026-41965](https://cve.now/CVE-2026-41965.md): Use-After-Free (UAF) vulnerability in the web. (CVSS 5.6)
- [CVE-2026-41963](https://cve.now/CVE-2026-41963.md): Stack overflow vulnerability in the media platform. (CVSS 2.8)
- [CVE-2026-41964](https://cve.now/CVE-2026-41964.md): Permission control vulnerability in the web. (CVSS 8.4)
- [CVE-2026-34866](https://cve.now/CVE-2026-34866.md): Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi (CVSS 5.1)
- [CVE-2026-34865](https://cve.now/CVE-2026-34865.md): Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi (CVSS 10.0)
- [CVE-2026-34864](https://cve.now/CVE-2026-34864.md): Boundary-unlimited vulnerability in the application read module. (CVSS 6.8)
- [CVE-2026-34863](https://cve.now/CVE-2026-34863.md): Out-of-bounds write vulnerability in the file system. (CVSS 6.7)
- [CVE-2026-34862](https://cve.now/CVE-2026-34862.md): Race condition vulnerability in the power consumption statistics module. (CVSS 6.3)
- [CVE-2026-34861](https://cve.now/CVE-2026-34861.md): Race condition vulnerability in the thermal management module. (CVSS 6.3)
- [CVE-2026-34859](https://cve.now/CVE-2026-34859.md): UAF vulnerability in the kernel module. (CVSS 5.9)
- [CVE-2026-34858](https://cve.now/CVE-2026-34858.md): UAF vulnerability in the communication module. (CVSS 4.1)
- [CVE-2026-34857](https://cve.now/CVE-2026-34857.md): UAF vulnerability in the communication module. (CVSS 4.7)
- [CVE-2026-34855](https://cve.now/CVE-2026-34855.md): Out-of-bounds write vulnerability in the kernel module. (CVSS 5.7)
- [CVE-2026-34854](https://cve.now/CVE-2026-34854.md): UAF vulnerability in the kernel module. (CVSS 5.7)
- [CVE-2026-34849](https://cve.now/CVE-2026-34849.md): UAF vulnerability in the screen management module. (CVSS 2.5)
- [CVE-2026-34856](https://cve.now/CVE-2026-34856.md): UAF vulnerability in the communication module. (CVSS 7.3)
- [CVE-2026-34853](https://cve.now/CVE-2026-34853.md): Permission bypass vulnerability in the LBS module. (CVSS 7.7)
- [CVE-2026-28553](https://cve.now/CVE-2026-28553.md): Vulnerability of improper permission control in the theme setting module. (CVSS 6.9)
- [CVE-2026-34867](https://cve.now/CVE-2026-34867.md): Double free vulnerability in the multi-mode input system. (CVSS 5.6)
- [CVE-2026-34860](https://cve.now/CVE-2026-34860.md): Access control vulnerability in the memo module. (CVSS 4.1)
- [CVE-2026-34852](https://cve.now/CVE-2026-34852.md): Stack overflow vulnerability in the media platform. (CVSS 6.1)
- [CVE-2026-34851](https://cve.now/CVE-2026-34851.md): Race condition vulnerability in the event notification module. (CVSS 2.2)
- [CVE-2026-34850](https://cve.now/CVE-2026-34850.md): Race condition vulnerability in the notification service. (CVSS 1.9)
- [CVE-2026-28542](https://cve.now/CVE-2026-28542.md): Permission bypass vulnerability in the system service framework. (CVSS 7.3)
- [CVE-2026-28548](https://cve.now/CVE-2026-28548.md): Vulnerability of improper verification in the email application. (CVSS 7.1)
- [CVE-2026-28551](https://cve.now/CVE-2026-28551.md): Race condition vulnerability in the device security management module. (CVSS 4.7)
- [CVE-2026-28549](https://cve.now/CVE-2026-28549.md): Race condition vulnerability in the permission management service. (CVSS 6.6)
- [CVE-2026-28547](https://cve.now/CVE-2026-28547.md): Vulnerability of uninitialized pointer access in the scanning module. (CVSS 6.8)
- [CVE-2026-28546](https://cve.now/CVE-2026-28546.md): Buffer overflow vulnerability in the scanning module. (CVSS 5.9)
- [CVE-2026-28543](https://cve.now/CVE-2026-28543.md): Race condition vulnerability in the maintenance and diagnostics module. (CVSS 4.4)
- [CVE-2026-28541](https://cve.now/CVE-2026-28541.md): Permission control vulnerability in the cellular\_data module. (CVSS 4.0)
- [CVE-2026-28540](https://cve.now/CVE-2026-28540.md): Out-of-bounds character read vulnerability in Bluetooth. (CVSS 4.0)
- [CVE-2026-28539](https://cve.now/CVE-2026-28539.md): Data processing vulnerability in the certificate management module. (CVSS 6.2)
- [CVE-2026-28538](https://cve.now/CVE-2026-28538.md): Path traversal vulnerability in the certificate management module. (CVSS 5.9)
- [CVE-2025-66319](https://cve.now/CVE-2025-66319.md): Permission control vulnerability in the resource scheduling module. (CVSS 3.3)
- [CVE-2026-28552](https://cve.now/CVE-2026-28552.md): Out-of-bounds write vulnerability in the IMS module. (CVSS 6.5)
- [CVE-2026-28550](https://cve.now/CVE-2026-28550.md): Race condition vulnerability in the security control module. (CVSS 4.0)
- [CVE-2026-28545](https://cve.now/CVE-2026-28545.md): Race condition vulnerability in the printing module. (CVSS 5.9)
- [CVE-2026-28544](https://cve.now/CVE-2026-28544.md): Race condition vulnerability in the printing module. (CVSS 6.2)
- [CVE-2026-28537](https://cve.now/CVE-2026-28537.md): Double free vulnerability in the window module. (CVSS 5.1)
- [CVE-2026-28536](https://cve.now/CVE-2026-28536.md): Authentication bypass vulnerability in the device authentication module. (CVSS 9.6)
- [CVE-2026-24928](https://cve.now/CVE-2026-24928.md): Out-of-bounds write vulnerability in the file system module. (CVSS 5.8)
- [CVE-2026-24927](https://cve.now/CVE-2026-24927.md): Out-of-bounds access vulnerability in the frequency modulation module. (CVSS 5.5)
- [CVE-2026-24924](https://cve.now/CVE-2026-24924.md): Vulnerability of improper permission control in the print module. (CVSS 6.1)
- [CVE-2026-24920](https://cve.now/CVE-2026-24920.md): Permission control vulnerability in the AMS module. (CVSS 6.2)
- [CVE-2026-24919](https://cve.now/CVE-2026-24919.md): Out-of-bounds write vulnerability in the DFX module. (CVSS 6.0)
- [CVE-2026-24917](https://cve.now/CVE-2026-24917.md): UAF vulnerability in the security module. (CVSS 6.5)
- [CVE-2026-24916](https://cve.now/CVE-2026-24916.md): Identity authentication bypass vulnerability in the window module. (CVSS 5.9)
- [CVE-2026-24931](https://cve.now/CVE-2026-24931.md): Vulnerability of improper criterion security check in the card module. (CVSS 5.9)
- [CVE-2026-24930](https://cve.now/CVE-2026-24930.md): UAF concurrency vulnerability in the graphics module. (CVSS 8.4)
- [CVE-2026-24929](https://cve.now/CVE-2026-24929.md): Out-of-bounds read vulnerability in the graphics module. (CVSS 5.9)
- [CVE-2026-24923](https://cve.now/CVE-2026-24923.md): Permission control vulnerability in the HDC module. (CVSS 6.3)
- [CVE-2026-24922](https://cve.now/CVE-2026-24922.md): Buffer overflow vulnerability in the HDC module. (CVSS 6.9)
- [CVE-2026-24921](https://cve.now/CVE-2026-24921.md): Address read vulnerability in the HDC module. (CVSS 4.8)
- [CVE-2026-24918](https://cve.now/CVE-2026-24918.md): Address read vulnerability in the communication module. (CVSS 6.8)
- [CVE-2026-24915](https://cve.now/CVE-2026-24915.md): Out-of-bounds read issue in the media subsystem. (CVSS 6.2)
- [CVE-2026-24914](https://cve.now/CVE-2026-24914.md): Type confusion vulnerability in the camera module. (CVSS 4.0)
- [CVE-2026-24926](https://cve.now/CVE-2026-24926.md): Out-of-bounds write vulnerability in the camera module. (CVSS 8.4)
- [CVE-2026-24925](https://cve.now/CVE-2026-24925.md): Heap-based buffer overflow vulnerability in the image module. (CVSS 7.3)
- [CVE-2025-68959](https://cve.now/CVE-2025-68959.md): Permission verification bypass vulnerability in the media library module. (CVSS 6.2)
- [CVE-2025-68970](https://cve.now/CVE-2025-68970.md): Permission verification bypass vulnerability in the media library module. (CVSS 6.1)
- [CVE-2025-68963](https://cve.now/CVE-2025-68963.md): Man-in-the-middle attack vulnerability in the Clone module. (CVSS 5.7)
- [CVE-2025-68967](https://cve.now/CVE-2025-68967.md): Vulnerability of improper permission control in the print module. (CVSS 5.7)
- [CVE-2025-68966](https://cve.now/CVE-2025-68966.md): Permission control vulnerability in the Notepad module. (CVSS 5.1)
- [CVE-2025-68965](https://cve.now/CVE-2025-68965.md): Permission control vulnerability in the Notepad module. (CVSS 4.7)
- [CVE-2025-68964](https://cve.now/CVE-2025-68964.md): Data verification vulnerability in the HiView module. (CVSS 6.2)
- [CVE-2025-68969](https://cve.now/CVE-2025-68969.md): Multi-thread race condition vulnerability in the thermal management module. (CVSS 6.8)
- [CVE-2025-68968](https://cve.now/CVE-2025-68968.md): Double free vulnerability in the multi-mode input module. (CVSS 7.8)
- [CVE-2025-68962](https://cve.now/CVE-2025-68962.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1)
- [CVE-2025-68961](https://cve.now/CVE-2025-68961.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1)
- [CVE-2025-68960](https://cve.now/CVE-2025-68960.md): Multi-thread race condition vulnerability in the video framework module. (CVSS 8.4)
- [CVE-2025-68958](https://cve.now/CVE-2025-68958.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.0)
- [CVE-2025-68957](https://cve.now/CVE-2025-68957.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.4)
- [CVE-2025-68956](https://cve.now/CVE-2025-68956.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.0)
- [CVE-2025-68955](https://cve.now/CVE-2025-68955.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.0)
- [CVE-2025-66330](https://cve.now/CVE-2025-66330.md): App lock verification bypass vulnerability in the file management app. (CVSS 4.9)
- [CVE-2025-66329](https://cve.now/CVE-2025-66329.md): Permission control vulnerability in the window management module. (CVSS 4.0)
- [CVE-2025-66325](https://cve.now/CVE-2025-66325.md): Permission control vulnerability in the package management module. (CVSS 6.2)
- [CVE-2025-58279](https://cve.now/CVE-2025-58279.md): Permission control vulnerability in the media library module. (CVSS 4.4)
- [CVE-2025-66334](https://cve.now/CVE-2025-66334.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-66333](https://cve.now/CVE-2025-66333.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-66332](https://cve.now/CVE-2025-66332.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-66331](https://cve.now/CVE-2025-66331.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-66328](https://cve.now/CVE-2025-66328.md): Multi-thread race condition vulnerability in the network management module. (CVSS 8.4)
- [CVE-2025-66327](https://cve.now/CVE-2025-66327.md): Race condition vulnerability in the network module. (CVSS 7.1)
- [CVE-2025-66326](https://cve.now/CVE-2025-66326.md): Race condition vulnerability in the audio module. (CVSS 6.7)
- [CVE-2025-66324](https://cve.now/CVE-2025-66324.md): Input verification vulnerability in the compression and decompression module. (CVSS 8.4)
- [CVE-2025-66323](https://cve.now/CVE-2025-66323.md): Vulnerability of improper criterion security check in the card module. (CVSS 5.3)
- [CVE-2025-66322](https://cve.now/CVE-2025-66322.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1)
- [CVE-2025-66321](https://cve.now/CVE-2025-66321.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1)
- [CVE-2025-66320](https://cve.now/CVE-2025-66320.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1)
- [CVE-2025-64312](https://cve.now/CVE-2025-64312.md): Permission control vulnerability in the file management module. (CVSS 4.9)
- [CVE-2025-58311](https://cve.now/CVE-2025-58311.md): UAF vulnerability in the USB driver module. (CVSS 5.8)
- [CVE-2025-58308](https://cve.now/CVE-2025-58308.md): Vulnerability of improper criterion security check in the call module. (CVSS 7.3)
- [CVE-2025-58305](https://cve.now/CVE-2025-58305.md): Identity authentication bypass vulnerability in the Gallery app. (CVSS 6.2)
- [CVE-2025-58304](https://cve.now/CVE-2025-58304.md): Permission control vulnerability in the file management module. (CVSS 4.9)
- [CVE-2025-58302](https://cve.now/CVE-2025-58302.md): Permission control vulnerability in the Settings module. (CVSS 8.4)
- [CVE-2025-58294](https://cve.now/CVE-2025-58294.md): Permission control vulnerability in the print module. (CVSS 6.2)
- [CVE-2025-64313](https://cve.now/CVE-2025-64313.md): Denial of service (DoS) vulnerability in the office service. (CVSS 5.3)
- [CVE-2025-64311](https://cve.now/CVE-2025-64311.md): Permission control vulnerability in the Notepad module. (CVSS 5.1)
- [CVE-2025-58315](https://cve.now/CVE-2025-58315.md): Permission control vulnerability in the Wi-Fi module. (CVSS 5.5)
- [CVE-2025-58314](https://cve.now/CVE-2025-58314.md): Vulnerability of accessing invalid memory in the component driver module. (CVSS 6.6)
- [CVE-2025-58312](https://cve.now/CVE-2025-58312.md): Permission control vulnerability in the App Lock module. (CVSS 5.1)
- [CVE-2025-58310](https://cve.now/CVE-2025-58310.md): Permission control vulnerability in the distributed component. (CVSS 8.0)
- [CVE-2025-58309](https://cve.now/CVE-2025-58309.md): Permission control vulnerability in the startup recovery module. (CVSS 6.8)
- [CVE-2025-58307](https://cve.now/CVE-2025-58307.md): UAF vulnerability in the screen recording framework module. (CVSS 6.4)
- [CVE-2025-58316](https://cve.now/CVE-2025-58316.md): DoS vulnerability in the video-related system service module. (CVSS 7.3)
- [CVE-2025-58303](https://cve.now/CVE-2025-58303.md): UAF vulnerability in the screen recording framework module. (CVSS 8.4)
- [CVE-2025-64315](https://cve.now/CVE-2025-64315.md): Configuration defect vulnerability in the file management module. (CVSS 4.4)
- [CVE-2025-64314](https://cve.now/CVE-2025-64314.md): Permission control vulnerability in the memory management module. (CVSS 9.3)
- [CVE-2025-58293](https://cve.now/CVE-2025-58293.md): Vulnerability of improper exception handling in the print module. (CVSS 5.5)
- [CVE-2025-58289](https://cve.now/CVE-2025-58289.md): Vulnerability of improper exception handling in the print module. (CVSS 5.9)
- [CVE-2025-58301](https://cve.now/CVE-2025-58301.md): Buffer overflow vulnerability in the device management module. (CVSS 6.2)
- [CVE-2025-58300](https://cve.now/CVE-2025-58300.md): Buffer overflow vulnerability in the device management module. (CVSS 6.2)
- [CVE-2025-58299](https://cve.now/CVE-2025-58299.md): Use After Free (UAF) vulnerability in the storage management module. (CVSS 8.4)
- [CVE-2025-58298](https://cve.now/CVE-2025-58298.md): Data processing error vulnerability in the package management module. (CVSS 7.3)
- [CVE-2025-58297](https://cve.now/CVE-2025-58297.md): Buffer overflow vulnerability in the sensor service. (CVSS 5.9)
- [CVE-2025-58295](https://cve.now/CVE-2025-58295.md): Buffer overflow vulnerability in the development framework module. (CVSS 5.9)
- [CVE-2025-58292](https://cve.now/CVE-2025-58292.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-58291](https://cve.now/CVE-2025-58291.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-58290](https://cve.now/CVE-2025-58290.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3)
- [CVE-2025-58288](https://cve.now/CVE-2025-58288.md): Denial of service (DoS) vulnerability in the office service. (CVSS 5.5)
- [CVE-2025-58287](https://cve.now/CVE-2025-58287.md): Use After Free (UAF) vulnerability in the office service. (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/huawei
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.