Huawei vulnerabilities
1,420 CVEs and advisories name Huawei as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-48353Some smartphones have configuration issues.
- CVE-2022-48352Some smartphones have data initialization issues.
- CVE-2022-48351The secure OS module has configuration defects.
- CVE-2022-48350The HUAWEI Messaging app has a vulnerability of unauthorized file access.
- CVE-2022-48349The control component has a spoofing vulnerability.
- CVE-2022-48348The MediaProvider module has a vulnerability of unauthorized data read.
- CVE-2022-48347The MediaProvider module has a vulnerability in permission verification.
- CVE-2022-48346The HwContacts module has a logic bypass vulnerability.
- CVE-2022-48291The Bluetooth module has an authentication bypass vulnerability in the pairing process.
- CVE-2018-7935 There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322.
- CVE-2022-48302The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data
- CVE-2022-48301The bundle management module lacks permission verification in some APIs.
- CVE-2022-48300The WMS module lacks the authentication mechanism in some APIs.
- CVE-2022-48299The WMS module lacks the authentication mechanism in some APIs.
- CVE-2022-48298The geofencing kernel code does not verify the length of the input data.
- CVE-2022-48297The geofencing kernel code has a vulnerability of not verifying the length of the input data.
- CVE-2022-48296The SystemUI has a vulnerability in permission management.
- CVE-2022-48295The IHwAntiMalPlugin interface lacks permission verification.
- CVE-2022-48294The IHwAttestationService interface has a defect in authentication.
- CVE-2022-48293The Bluetooth module has an OOM vulnerability.
- CVE-2022-48292The Bluetooth module has an out-of-memory (OOM) vulnerability.
- CVE-2022-48290The phone-PC collaboration module has a logic bypass vulnerability.
- CVE-2022-48289The bundle management module lacks authentication and control mechanisms in some APIs.
- CVE-2022-48288The bundle management module lacks authentication and control mechanisms in some APIs.
- CVE-2022-48287The HwContacts module has a logic bypass vulnerability.
- CVE-2022-48286The multi-screen collaboration module has a privilege escalation vulnerability.
- CVE-2022-47976The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this
- CVE-2022-47975The DUBAI module has a double free vulnerability.
- CVE-2022-47974The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Blue
- CVE-2022-46762The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.