HUAWEI Security Vulnerabilities
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.
9.8CVSS
9.3AI Score
0.001EPSS
Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim.
5.3CVSS
5.2AI Score
0.0005EPSS
Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality.
9.1CVSS
8.9AI Score
0.001EPSS
Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.
9.8CVSS
9.2AI Score
0.001EPSS
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
7.5CVSS
7.4AI Score
0.0005EPSS
Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
7.5CVSS
7.4AI Score
0.0005EPSS
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally.
7.5CVSS
7.4AI Score
0.0005EPSS
Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.
7.5CVSS
7.4AI Score
0.0005EPSS
Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
7.5CVSS
7.6AI Score
0.0005EPSS
Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.
5.3CVSS
5.2AI Score
0.0005EPSS
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.
3.7CVSS
4.3AI Score
0.0005EPSS
Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.
7.5CVSS
7.5AI Score
0.0005EPSS
Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.
7.5CVSS
7.5AI Score
0.0005EPSS
Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.
3.3CVSS
4.2AI Score
0.0004EPSS
Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically.
5.3CVSS
5.2AI Score
0.0005EPSS
Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically.
5.3CVSS
5.2AI Score
0.0005EPSS
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
5.3CVSS
5.2AI Score
0.0005EPSS
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.
7.5CVSS
7.5AI Score
0.0005EPSS
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.6AI Score
0.001EPSS
Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.3AI Score
0.001EPSS
Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption.
7.5CVSS
7.3AI Score
0.0005EPSS
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.
5.3CVSS
5.2AI Score
0.0005EPSS
Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.
9.8CVSS
9.3AI Score
0.001EPSS
API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.
9.8CVSS
9.2AI Score
0.001EPSS
Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and integrity.
9.1CVSS
9AI Score
0.0005EPSS
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
7.5CVSS
7.4AI Score
0.0005EPSS
Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.
4.3CVSS
4.7AI Score
0.0004EPSS
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.6AI Score
0.001EPSS
Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.
7.5CVSS
7.6AI Score
0.001EPSS
Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.5AI Score
0.001EPSS
Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.
9.8CVSS
9.2AI Score
0.001EPSS
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality.
9.1CVSS
9.1AI Score
0.001EPSS
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.
7.5CVSS
7.3AI Score
0.0005EPSS
Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable.
5.3CVSS
5.2AI Score
0.0005EPSS
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
7.5CVSS
7.4AI Score
0.001EPSS
Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart.
5.3CVSS
5.1AI Score
0.0005EPSS
Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.
5.3CVSS
5.2AI Score
0.0005EPSS