231584 matches found
Design/Logic Flaw
Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally...
Code injection
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...
Authentication flaw
Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality...
Improper access control
Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality...
Input validation
Unchecked length coming from user input in settings shell...
CVE-2023-6749
CVE-2023-6749 affects Zephyr RTOS, specifically the libzephyr.so component and its Settings Shell handling of SETTINGS_VALUE_STRING values. The root cause is unchecked length from user input, which can lead to a buffer overflow and possible Denial of Service as described in Veracode’s entry. The ...
Information disclosure
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality...
Privilege escalation
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability...
CVE-2022-48621
CVE-2022-48621 concerns a vulnerability in the Wi‑Fi module of Huawei HarmonyOS/EMUI where critical functions lack authentication. The public description indicates potential confidentiality impact upon exploitation, with NVD/PSIRT scoring showing high impact (CVSS v3.1 base score 7.5, impact on c...
CVE-2023-52381
The CVE-2023-52381 entry corresponds to a script injection vulnerability in Huawei HarmonyOS/EMUI mail module. The CNVD CNVD-2024-31083 document confirms an in-component script injection that can allow an attacker to execute arbitrary code on affected systems. The NVD/NVD-derived description simi...
CVE-2023-52380
CVE-2023-52380 is an improper access control vulnerability affecting the Huawei HarmonyOS/EMUI mail module. The root cause is insufficient access controls in the mail component, potentially allowing information disclosure. Public documents enumerate HarmonyOS/EMUI mail as affected, with no explic...
CVE-2023-52379
CVE-2023-52379 describes a permission-control vulnerability in the calendarProvider module that can affect service confidentiality. The CVE entry indicates a high-severity impact (confidentiality) with network attack vector, no user interaction, no privileges required, and no impact on availabili...
CVE-2023-52378
CVE-2023-52378 relates to Huawei HarmonyOS/EMUI WMS (WindowManagerServices) with an incorrect service logic root cause in the WMS module. The connected CNVD/CNNVD entries describe a privilege control type vulnerability and a business logic error that can lead to usability issues or functional exc...
CVE-2023-52376
Technical details about CVE-2023-52376 are not publicly provided in the supplied connected documents. Monitor for updates from vendors and security trackers for affected products, scope, and remediation.
CVE-2023-52375
CVE-2023-52375 concerns Huawei HarmonyOS/EMUI’s WMS (WindowManagerService) module. Connected sources describe a privilege control vulnerability in the WMS, which can affect usability and, per the NVD entry, may impact availability. The CVE’s description notes a permission control issue in WindowM...
Improper access control
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity...
Privilege escalation
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...
Input validation
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...