Huawei CVEs
1,420 CVEs and advisories name Huawei as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-37008The recovery module has a vulnerability of bypassing the verification of an update package before use.
- CVE-2022-37001The diag-router module has a vulnerability in intercepting excessive long and short instructions.
- CVE-2022-37007The chinadrm module has an out-of-bounds read vulnerability.
- CVE-2021-40034The video framework has the memory overwriting vulnerability caused by addition overflow.
- CVE-2021-40016Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.
- CVE-2021-40013Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.
- CVE-2021-40012Vulnerability of pointers being incorrectly used during data transmission in the video framework.
- CVE-2022-34738The SystemUI module has a vulnerability in permission control.
- CVE-2022-34737The application security module has a vulnerability in permission assignment.
- CVE-2022-34742The system module has a read/write vulnerability.
- CVE-2022-34739The fingerprint module has a vulnerability of overflow in arithmetic addition.
- CVE-2022-34741The NFC module has a buffer overflow vulnerability.
- CVE-2022-34740The NFC module has a buffer overflow vulnerability.
- CVE-2022-34743The AT commands of the USB port have an out-of-bounds read vulnerability.
- CVE-2022-34736The frame scheduling module has a null pointer dereference vulnerability.
- CVE-2022-34735The frame scheduling module has a null pointer dereference vulnerability.
- CVE-2021-46741The basic framework and setting module have defects, which were introduced during the design.
- CVE-2022-31752Missing authorization vulnerability in the system components.
- CVE-2022-31761Configuration defects in the secure OS module.
- CVE-2021-46813Vulnerability of residual files not being deleted after an update in the ChinaDRM module.
- CVE-2022-31754Logical defects in code implementation in some products.
- CVE-2021-46811HwSEServiceAPP has a vulnerability in permission management.
- CVE-2022-31753The voice wakeup module has a vulnerability of using externally-controlled format strings.
- CVE-2022-31757The setting module has a vulnerability of improper use of APIs.
- CVE-2021-46812The Device Manager has a vulnerability in multi-device interaction.
- CVE-2022-31760Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.
- CVE-2022-31762The AMS module has a vulnerability in input validation.
- CVE-2022-31759AppLink has a vulnerability of accessing uninitialized pointers.
- CVE-2022-31755The communication module has a vulnerability of improper permission preservation.
- CVE-2022-31756The fingerprint sensor module has design defects.