Huawei vulnerabilities
1,420 CVEs and advisories name Huawei as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-0117The online authentication provided by the hwKitAssistant lacks strict identity verification of applications.
- CVE-2023-0116The reminder module lacks an authentication mechanism for broadcasts received.
- CVE-2022-48480Integer overflow vulnerability in some phones.
- CVE-2022-48479The facial recognition TA of some products has the out-of-bounds memory read vulnerability.
- CVE-2022-48478The facial recognition TA of some products lacks memory length verification.
- CVE-2021-46887Lack of length check vulnerability in the HW_KEYMASTER module.
- CVE-2021-46886The video framework has memory overwriting caused by addition overflow.
- CVE-2021-46885The video framework has memory overwriting caused by addition overflow.
- CVE-2021-46884The video framework has memory overwriting caused by addition overflow.
- CVE-2021-46883The video framework has memory overwriting caused by addition overflow.
- CVE-2021-46882The video framework has memory overwriting caused by addition overflow.
- CVE-2021-46881The video framework has memory overwriting caused by addition overflow.
- CVE-2023-1696The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.
- CVE-2023-1694The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality
- CVE-2023-1693The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality
- CVE-2023-1692The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.
- CVE-2022-48314The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process.
- CVE-2022-48313The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process.
- CVE-2022-48312The HwPCAssistant module has the out-of-bounds read/write vulnerability.
- CVE-2023-26549The SystemUI module has a vulnerability of repeated app restart due to improper parameters.
- CVE-2023-26548The pgmng module has a vulnerability in serialization/deserialization.
- CVE-2023-26547The InputMethod module has a vulnerability of serialization/deserialization mismatch.
- CVE-2022-48361The Always On Display (AOD) has a path traversal vulnerability in theme files.
- CVE-2022-48360The facial recognition module has a vulnerability in file permission control.
- CVE-2022-48359The recovery mode for updates has a vulnerability that causes arbitrary disk modification.
- CVE-2022-48358The BatteryHealthActivity has a redirection vulnerability.
- CVE-2022-48357Some products have the double fetch vulnerability.
- CVE-2022-48356The facial recognition module has a vulnerability in input parameter verification.
- CVE-2022-48355The Bluetooth module has a heap out-of-bounds read vulnerability.
- CVE-2022-48354The Bluetooth module has a heap out-of-bounds write vulnerability.