CVE-2024-56437

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56450

Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56450

CVE-2024-56450 is a buffer overflow in Huawei HarmonyOS device driver module, with impact on availability. Red Hat and multiple CNVD/CNNVD entries corroborate a local-attackable overflow in the driver, potentially crashing the system. Affected component is the device driver module; specific versi...

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56448

Technical details about CVE-2024-56448 are not publicly available in the provided documents. Monitor for updates from Huawei and security bulletins.

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56446

CVE-2024-56446 concerns Huawei HarmonyOS with a vulnerability in the notification module where variables are not initialized. The impact described is potential availability disruption. The documents do not specify affected product versions, root cause details beyond the initialization issue, expl...

CVE-2024-56446

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56446

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56438

Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56438

Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56437

CVE-2024-56437 affects Huawei HarmonyOS widget framework module where input parameters are not verified. Impact: successful exploitation may affect availability. CVSSv3.1 vectors referenced include AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5) per NVD; Red Hat and other sources reiterate i...

CVE-2024-56437

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2023-52954

Technical details for CVE-2023-52954 are not publicly available in the provided documents; monitor for updates from vendors and CVE feeds.

CVE-2023-52954

Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-3295 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue is related to an integer overflow vulnerability that occurs during the loading of glTF models in the 3D engine module. Successful exploitation of this vulnerability may...

PT-2025-1560 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: The issue is related to improper permission control in the Gallery module. Successful exploitation of this issue may affect availability. There is no information provided about the...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An incorrect memory address protection vulnerability exists in the Huawei HarmonyOS HUKS module, which can be exploited by an attacker to cause availability ...

PT-2025-3294 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Component driver module affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the component driver module. Successful exploitation of this vulnerability may affect availability. There is no...

PT-2025-3300 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue concerns the vulnerability of input parameters not being verified during the loading of glTF models in the 3D engine module. Successful exploitation of this vulnerability...