Vulnerabilities in huawei

1,400 results
Vexday analysis

Huawei apresenta um volume mínimo de vulnerabilidades rastreadas (1 CVE), sem registros de exploração ativa nem críticas de severidade elevada. A única fragilidade catalogada refere-se a validação inadequada de entrada (CWE-20), com nenhuma publicação recente nos últimos 90 dias, indicando um panorama de risco baixo e estável no curto prazo.

CVE-2023-1693HIGHThe Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentialityEPSS 0.4%CVE-2022-48286HIGHThe multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect datEPSS 0.4%CVE-2026-28552MEDIUMOut-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.4%CVE-2023-31226HIGHThe SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affecEPSS 0.4%CVE-2023-31227HIGHThe hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confiEPSS 0.4%CVE-2023-34156—Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause serEPSS 0.4%CVE-2019-5276—Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may interEPSS 0.4%CVE-2022-44561HIGHThe preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized appEPSS 0.4%CVE-2024-32990MEDIUMPermission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect EPSS 0.4%CVE-2023-44111—Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service coEPSS 0.4%CVE-2023-52377HIGHVulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-boEPSS 0.4%CVE-2022-48287HIGHThe HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity.EPSS 0.4%CVE-2026-34865CRITICALOut-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confiEPSS 0.4%CVE-2026-81647MEDIUMOut-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.4%CVE-2024-58112HIGHException capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerabiliEPSS 0.4%CVE-2024-58111HIGHException capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerabiliEPSS 0.4%CVE-2024-58113MEDIUMVulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affeEPSS 0.4%CVE-2023-52537HIGHVulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will afEPSS 0.4%CVE-2024-58107HIGHBuffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.4%CVE-2023-44096— Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service cEPSS 0.4%