Huawei

Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module.

The system framework layer has a vulnerability of serialization/deserialization mismatch.

The AMS module has a vulnerability of serialization/deserialization mismatch.

The AMS module has a vulnerability of serialization/deserialization mismatch.

The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.

The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.

The WLAN module has a vulnerability in permission verification.

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation.

The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution.

The DRM module has a vulnerability in verifying the secure memory attributes.

Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.

Buffer overflow vulnerability in the FLP module.

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Vulnerability of defects introduced in the design process in the HiviewTunner module.

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module.

Vulnerability of commands from the modem being intercepted in the atcmdserver module.

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.

Input verification vulnerability in the fingerprint module.

Vulnerability of identity verification being bypassed in the Gallery module.

Use After Free (UAF) vulnerability in the Vdecoderservice service.

Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions.

Input verification vulnerability in the AMS module.