Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Total 1888 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48259 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2024-02-28 N/A 9.8 CRITICAL
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges.
CVE-2022-48290 1 Huawei 1 Harmonyos 2024-02-28 N/A 9.1 CRITICAL
The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity.
CVE-2022-48288 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 7.5 HIGH
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46319 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 9.8 CRITICAL
Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write.
CVE-2022-48260 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2024-02-28 N/A 7.5 HIGH
There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.
CVE-2022-41599 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 7.5 HIGH
The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-39012 1 Huawei 2 Aslan-al10, Aslan-al10 Firmware 2024-02-28 N/A 7.5 HIGH
Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal.
CVE-2022-41579 1 Huawei 2 Hota-fara-b19, Hota-fara-b19 Firmware 2024-02-28 N/A 6.5 MEDIUM
There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band.
CVE-2021-33640 2 Fedoraproject, Huawei 2 Fedora, Openeuler 2024-02-28 N/A 9.8 CRITICAL
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).
CVE-2022-48230 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2024-02-28 N/A 7.5 HIGH
There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.
CVE-2022-46315 1 Huawei 1 Harmonyos 2024-02-28 N/A 7.5 HIGH
The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-46313 1 Huawei 1 Harmonyos 2024-02-28 N/A 5.3 MEDIUM
The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone.
CVE-2022-46326 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 9.8 CRITICAL
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2022-47974 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 6.5 MEDIUM
The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart.
CVE-2022-46762 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 7.5 HIGH
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46310 1 Huawei 1 Harmonyos 2024-02-28 N/A 7.5 HIGH
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46325 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 9.8 CRITICAL
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2021-46856 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 7.5 HIGH
The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-48294 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 7.5 HIGH
The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-48298 1 Huawei 2 Emui, Harmonyos 2024-02-28 N/A 7.5 HIGH
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.