Vendor CVEs
Huawei
All CVEs
2,254 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-48909 | 0.00 | — | 0.00 | Jun 6, 2025 | Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-58114 | 0.00 | — | 0.00 | Jun 6, 2025 | Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-48907 | 0.00 | — | 0.00 | Jun 6, 2025 | Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-48906 | 0.00 | — | 0.00 | Jun 6, 2025 | Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-48905 | 0.00 | — | 0.00 | Jun 6, 2025 | Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types. | |||
| CVE-2025-48904 | 0.00 | — | 0.00 | Jun 6, 2025 | Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-48903 | 0.00 | — | 0.00 | Jun 6, 2025 | Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-48902 | 0.00 | — | 0.00 | Jun 6, 2025 | Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-46593 | 0.00 | — | 0.00 | May 6, 2025 | Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-46592 | 0.00 | — | 0.00 | May 6, 2025 | Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-46591 | 0.00 | — | 0.00 | May 6, 2025 | Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-46590 | 0.00 | — | 0.00 | May 6, 2025 | Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypass authentication and enable access to some network search functions. | |||
| CVE-2025-46589 | 0.00 | — | 0.00 | May 6, 2025 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2025-46588 | 0.00 | — | 0.00 | May 6, 2025 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2024-58252 | 0.00 | — | 0.00 | May 6, 2025 | Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-46587 | 0.00 | — | 0.00 | May 6, 2025 | Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-46586 | 0.00 | — | 0.00 | May 6, 2025 | Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-46585 | 0.00 | — | 0.00 | May 6, 2025 | Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-46584 | 0.00 | — | 0.00 | May 6, 2025 | Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-31175 | 0.00 | — | 0.00 | Apr 7, 2025 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. | |||
| CVE-2025-31174 | 0.00 | — | 0.00 | Apr 7, 2025 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-31173 | 0.00 | — | 0.00 | Apr 7, 2025 | Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-31172 | 0.00 | — | 0.00 | Apr 7, 2025 | Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-31171 | 0.00 | — | 0.00 | Apr 7, 2025 | File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-31170 | 0.00 | — | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2024-58127 | 0.00 | — | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2024-58126 | 0.00 | — | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2024-58125 | 0.00 | — | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2024-58124 | 0.00 | — | 0.00 | Apr 7, 2025 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. | |||
| CVE-2024-58116 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58115 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58113 | 0.00 | — | 0.00 | Apr 7, 2025 | Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58112 | 0.00 | — | 0.00 | Apr 7, 2025 | Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58111 | 0.00 | — | 0.00 | Apr 7, 2025 | Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58110 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58109 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58108 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58107 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58106 | 0.00 | — | 0.00 | Apr 7, 2025 | Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58050 | 0.00 | — | 0.00 | Mar 4, 2025 | Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-58049 | 0.00 | — | 0.00 | Mar 4, 2025 | Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-58048 | 0.00 | — | 0.00 | Mar 4, 2025 | Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58047 | 0.00 | — | 0.00 | Mar 4, 2025 | Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-58046 | 0.00 | — | 0.00 | Mar 4, 2025 | Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-58045 | 0.00 | — | 0.00 | Mar 4, 2025 | Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-27521 | 0.00 | — | 0.00 | Mar 4, 2025 | Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-58044 | 0.00 | — | 0.00 | Mar 4, 2025 | Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-58043 | 0.00 | — | 0.00 | Mar 4, 2025 | Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2024-57962 | 0.00 | — | 0.00 | Feb 6, 2025 | Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2024-57961 | 0.00 | — | 0.00 | Feb 6, 2025 | Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
- CVE-2025-48909Jun 6, 2025risk 0.00cvss —epss 0.00
Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58114Jun 6, 2025risk 0.00cvss —epss 0.00
Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-48907Jun 6, 2025risk 0.00cvss —epss 0.00
Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-48906Jun 6, 2025risk 0.00cvss —epss 0.00
Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-48905Jun 6, 2025risk 0.00cvss —epss 0.00
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.
- CVE-2025-48904Jun 6, 2025risk 0.00cvss —epss 0.00
Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-48903Jun 6, 2025risk 0.00cvss —epss 0.00
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-48902Jun 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-46593May 6, 2025risk 0.00cvss —epss 0.00
Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-46592May 6, 2025risk 0.00cvss —epss 0.00
Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-46591May 6, 2025risk 0.00cvss —epss 0.00
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-46590May 6, 2025risk 0.00cvss —epss 0.00
Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypass authentication and enable access to some network search functions.
- CVE-2025-46589May 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2025-46588May 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2024-58252May 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-46587May 6, 2025risk 0.00cvss —epss 0.00
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-46586May 6, 2025risk 0.00cvss —epss 0.00
Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-46585May 6, 2025risk 0.00cvss —epss 0.00
Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-46584May 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-31175Apr 7, 2025risk 0.00cvss —epss 0.00
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.
- CVE-2025-31174Apr 7, 2025risk 0.00cvss —epss 0.00
Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-31173Apr 7, 2025risk 0.00cvss —epss 0.00
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-31172Apr 7, 2025risk 0.00cvss —epss 0.00
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-31171Apr 7, 2025risk 0.00cvss —epss 0.00
File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-31170Apr 7, 2025risk 0.00cvss —epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2024-58127Apr 7, 2025risk 0.00cvss —epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2024-58126Apr 7, 2025risk 0.00cvss —epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2024-58125Apr 7, 2025risk 0.00cvss —epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2024-58124Apr 7, 2025risk 0.00cvss —epss 0.00
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- CVE-2024-58116Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58115Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58113Apr 7, 2025risk 0.00cvss —epss 0.00
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58112Apr 7, 2025risk 0.00cvss —epss 0.00
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58111Apr 7, 2025risk 0.00cvss —epss 0.00
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58110Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58109Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58108Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58107Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58106Apr 7, 2025risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58050Mar 4, 2025risk 0.00cvss —epss 0.00
Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58049Mar 4, 2025risk 0.00cvss —epss 0.00
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58048Mar 4, 2025risk 0.00cvss —epss 0.00
Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58047Mar 4, 2025risk 0.00cvss —epss 0.00
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58046Mar 4, 2025risk 0.00cvss —epss 0.00
Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58045Mar 4, 2025risk 0.00cvss —epss 0.00
Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-27521Mar 4, 2025risk 0.00cvss —epss 0.00
Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-58044Mar 4, 2025risk 0.00cvss —epss 0.00
Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-58043Mar 4, 2025risk 0.00cvss —epss 0.00
Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-57962Feb 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-57961Feb 6, 2025risk 0.00cvss —epss 0.00
Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
Page 17 of 46