Priority HIGH 66
Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0057 · Published 2022-08-09 · No fix listed
Priority MEDIUM 45
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01261 · Published 2022-01-07 · No fix listed CWE-787
Priority MEDIUM 45
There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer overflow occurs.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01348 · Published 2021-01-13 · No fix listed CWE-119
Priority MEDIUM 44
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-pr…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00964 · Published 2022-04-11 · No fix listed
Priority MEDIUM 44
There is an out-of-bounds read vulnerability in the IFAA module.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0109 · Published 2022-03-07 · No fix listed CWE-125
Priority MEDIUM 44
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00871 · Published 2022-01-07 · No fix listed CWE-787
Priority MEDIUM 44
There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00917 · Published 2022-01-03 · No fix listed CWE-415
Priority MEDIUM 44
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00895 · Published 2021-12-08 · No fix listed CWE-787
Priority MEDIUM 44
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00924 · Published 2021-12-08 · No fix listed CWE-416
Priority MEDIUM 44
There is a memory address out of bounds vulnerability in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00898 · Published 2022-02-25 · No fix listed CWE-119
Priority MEDIUM 44
There is a memory address out of bounds in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00873 · Published 2022-02-25 · No fix listed CWE-119
Priority MEDIUM 44
There is a vulnerability when configuring permission isolation in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00894 · Published 2022-02-25 · No fix listed CWE-119
Priority MEDIUM 44
There is a logic bypass vulnerability in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00854 · Published 2022-02-25 · No fix listed
Priority MEDIUM 44
There is a memory address out of bounds in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00894 · Published 2022-02-25 · No fix listed CWE-119
Priority MEDIUM 44
There is a memory address out of bounds in smartphones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00873 · Published 2022-02-25 · No fix listed CWE-119
Priority MEDIUM 44
There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious co…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00917 · Published 2021-10-28 · No fix listed
Priority MEDIUM 44
There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to remotely execute commands.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00946 · Published 2021-08-02 · No fix listed CWE-913
Priority MEDIUM 44
There is a Key Management Errors Vulnerability in Huawei Smartphone.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00832 · Published 2021-06-30 · No fix listed
Priority MEDIUM 44
There is an Improper Validation of Array Index vulnerability in Huawei Smartphone.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00917 · Published 2021-06-03 · No fix listed CWE-129
Priority MEDIUM 44
There is an Integer Overflow Vulnerability in Huawei Smartphone.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00943 · Published 2021-06-30 · No fix listed CWE-190
Priority MEDIUM 44
There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to improper restriction of operations within the bounds of a memory buffer.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00815 · Published 2021-01-13 · No fix listed CWE-787
Priority MEDIUM 43
Double free vulnerability in the storage module.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00644 · Published 2022-09-16 · No fix listed CWE-415
Priority MEDIUM 43
The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2022-09-16 · No fix listed
Priority MEDIUM 43
The AOD module has a vulnerability in permission assignment.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00515 · Published 2022-08-09 · No fix listed CWE-276
Priority MEDIUM 43
The SystemUI module has a privilege escalation vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0053 · Published 2022-08-09 · No fix listed CWE-269
Load more