CVE-2024-56437

CVE-2024-56437 affects Huawei HarmonyOS widget framework module where input parameters are not verified. Impact: successful exploitation may affect availability. CVSSv3.1 vectors referenced include AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5) per NVD; Red Hat and other sources reiterate i...

CVE-2023-52954

Technical details for CVE-2023-52954 are not publicly available in the provided documents; monitor for updates from vendors and CVE feeds.

CVE-2023-52954

Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-3294 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Component driver module affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the component driver module. Successful exploitation of this vulnerability may affect availability. There is no...

PT-2025-3296 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue concerns the lack of verification of input parameters during the loading of glTF models in the 3D engine module. Successful exploitation of this issue may impact...

PT-2025-3282 · Unknown · Huks Module

Name of the Vulnerable Software and Affected Versions: HUKS module affected versions not specified Description: The issue is related to improper memory address protection in the HUKS module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the moment, the...

PT-2025-1560 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: The issue is related to improper permission control in the Gallery module. Successful exploitation of this issue may affect availability. There is no information provided about the...

PT-2025-3300 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue concerns the vulnerability of input parameters not being verified during the loading of glTF models in the 3D engine module. Successful exploitation of this vulnerability...

CVE-2024-56451: Integer Overflow to Buffer Overflow

Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-3295 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue is related to an integer overflow vulnerability that occurs during the loading of glTF models in the 3D engine module. Successful exploitation of this vulnerability may...

PT-2025-3281 · Unknown · Widget Framework Module

Name of the Vulnerable Software and Affected Versions: Widget framework module affected versions not specified Description: The issue concerns a vulnerability of input parameters not being verified in the widget framework module. Successful exploitation of this vulnerability may affect...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An incorrect memory address protection vulnerability exists in the Huawei HarmonyOS HUKS module, which can be exploited by an attacker to cause availability ...

CVE-2024-56446: Use of Uninitialized Variable

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-3297 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue concerns the lack of verification of input parameters during the loading of glTF models in the 3D engine module. Successful exploitation of this issue may impact...

CVE-2024-56437: Improper Input Validation

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that can be exploited by an attacker to compromise availability...

CVE-2020-9253

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. Vulnerability ID: HWPSIRT-2019-11030 This...

CVE-2020-9253

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. Vulnerability ID: HWPSIRT-2019-11030 This...

PT-2024-10869 · Huawei · Huawei Smartphone

Name of the Vulnerable Software and Affected Versions: Huawei smart phone affected versions not specified Description: A stack overflow vulnerability exists in some Huawei smart phones, allowing an attacker to craft a specific packet to exploit this issue. Due to insufficient verification, this...

Huawei Lion-AL00C 安全漏洞

The Huawei Lion-AL00C is a smartphone from the Chinese company Huawei Huawei. The Huawei Lion-AL00C suffers from a stack overflow vulnerability that stems from a lack of sufficient checksums. An attacker could exploit the vulnerability to cause tampering of information, affecting availability...