Vulnerabilidades en huawei
1400 resultadosAnálisis Vexday
Huawei apresenta um volume mínimo de vulnerabilidades rastreadas (1 CVE), sem registros de exploração ativa nem críticas de severidade elevada. A única fragilidade catalogada refere-se a validação inadequada de entrada (CWE-20), com nenhuma publicação recente nos últimos 90 dias, indicando um panorama de risco baixo e estável no curto prazo.
CVE-2021-46881HIGHThe video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilitEPSS 0.4%CVE-2022-46314HIGHThe IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.EPSS 0.4%CVE-2022-48500HIGHConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2021-46882HIGHThe video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilitEPSS 0.4%CVE-2024-30417HIGHPath traversal vulnerability in the Bluetooth-based sharing module.
Impact: Successful exploitation of this vulnerability may affect serviceEPSS 0.4%CVE-2022-44549HIGHThe LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to accEPSS 0.4%CVE-2022-44557HIGHThe SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploEPSS 0.4%CVE-2023-41312—Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated aEPSS 0.4%CVE-2023-5801—Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect iEPSS 0.4%CVE-2022-48347—The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiEPSS 0.4%CVE-2023-26549—The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability maEPSS 0.4%CVE-2022-48348CRITICALThe MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiaEPSS 0.4%CVE-2023-49239—Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiEPSS 0.4%CVE-2023-49247—Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiaEPSS 0.4%CVE-2023-49246HIGHUnauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiEPSS 0.4%CVE-2023-46759—Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.4%CVE-2023-46771HIGHSecurity vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.4%CVE-2023-49240—Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.4%CVE-2023-44113HIGHVulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnEPSS 0.4%CVE-2023-41306—Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may caEPSS 0.4%