Huawei vulnerabilities, page 5
2,404 vulnerabilities
Known vulnerabilities in Huawei products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,105 products.
CVE-2021-40026huaweiemui+2
EPSS score0.63%
There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40057huaweiemui+1EPSS score0.75%
There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.CVE-2021-40008huaweicloudengine_12800_firmware+3EPSS score0.68%
There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.CVE-2021-40032huaweiemui+1EPSS score0.90%
The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40022huaweiharmonyosEPSS score0.69%
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40056huaweiemui+1EPSS score0.74%
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.CVE-2021-40009huaweiemui+2EPSS score0.65%
There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40049ubuntupms+3EPSS score0.77%
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.CVE-2021-40020huaweiemui+1EPSS score0.67%
There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-40000huaweiharmonyosEPSS score0.38%
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.CVE-2021-40048huaweiemui+2EPSS score0.77%
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.CVE-2021-40035huaweiemui+2EPSS score0.79%
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.CVE-2021-40018huaweiharmonyosEPSS score0.67%
The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40054huaweiemui+1EPSS score0.62%
There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-40050huaweiemui+2EPSS score1.09%
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.CVE-2021-40063huaweiemui+2EPSS score0.73%
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2021-40043huaweiais-bw80h-00_firmwareEPSS score0.39%
The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.CVE-2021-40039huaweiemui+2EPSS score0.60%
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40038huaweiemui+2EPSS score0.60%
There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-40012huaweiemui+2EPSS score0.86%
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.