Vulnerabilities

TI-2026-83772 CVE-2026-101184 · GHSA-h86x-mppv-hp46

Permission flaw in Huawei Bluetooth module affects availability

LOW 23

Permission control vulnerability in the Bluetooth module.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00075 Published 2026-11-02 No fix listed CWE-264

TI-2026-83771 CVE-2026-101178 · GHSA-9qv8-r69g-p4f5

Permission control flaw in Huawei autofill service exposes data

LOW 28

Permission control vulnerability in the autofill service module.

CVSS 3.1MEDIUM 6.6 Local No auth User interaction EPSS 0.00079 Published 2026-11-02 No fix listed CWE-200

TI-2026-83770 CVE-2026-101177 · GHSA-23rc-cmmh-2cx7

Permission control flaw in the Huawei Optimizer module

LOW 17

Permission control vulnerability in the Optimizer module.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00146 Published 2026-11-02 No fix listed CWE-264

TI-2026-83769 CVE-2026-101174 · GHSA-v3hg-q936-w95m

Denial of service in Huawei HarmonyOS DSoftBus module

LOW 25

DoS vulnerability in the DSoftBus module.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00149 Published 2026-11-02 No fix listed CWE-400

TI-2026-83768 CVE-2026-101173 · GHSA-xx2c-j6fh-rr7q

Denial of service in Huawei HarmonyOS DSoftBus module

LOW 28

DoS vulnerability in the DSoftBus module.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00125 Published 2026-11-02 No fix listed CWE-400

TI-2026-83763 CVE-2026-101176 · GHSA-chm4-2g7h-7hq4

Access control flaw in Huawei HarmonyOS and EMUI event notifications

LOW 30

Permission control vulnerability in the event notification management module.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00133 Published 2026-11-02 No fix listed CWE-264

TI-2026-83767 CVE-2026-101186 · GHSA-xh7r-qp3f-cv4q

Denial of service in the window module of Huawei HarmonyOS

LOW 38

DoS vulnerability in the window module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00247 Published 2026-11-02 No fix listed CWE-19

TI-2026-83766 CVE-2026-101185 · GHSA-h394-89r9-c5qx

Out-of-bounds read in Huawei HarmonyOS peripheral module

LOW 25

OOB read vulnerability in the peripheral module.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0008 Published 2026-11-02 No fix listed CWE-805

TI-2026-83765 CVE-2026-101183 · GHSA-gxpw-w695-578r

Use-after-free in Huawei HarmonyOS location service module

LOW 25

UAF vulnerability in the location service module.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0009 Published 2026-11-02 No fix listed CWE-416

TI-2026-83764 CVE-2026-101182 · GHSA-279j-x223-5hhm

Race condition in Huawei HarmonyOS location service module

LOW 25

Race condition vulnerability in the location service module.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00075 Published 2026-11-02 No fix listed CWE-362

TI-2026-83762 CVE-2026-101181 · GHSA-739x-rmv6-xg4v

Permission control flaw in the HarmonyOS WLAN module

LOW 23

Permission control vulnerability in the WLAN module.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00083 Published 2026-11-02 No fix listed CWE-200

TI-2026-83761 CVE-2026-101180 · GHSA-fm4c-g4r5-j629

Huawei HarmonyOS file parsing module DoS via uncontrolled recursion

LOW 19

DoS vulnerability in the file parsing module.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00161 Published 2026-11-02 No fix listed CWE-674

TI-2026-83760 CVE-2026-101179 · GHSA-g3r9-w8pr-mh8r

Buffer overflow in the HarmonyOS file preview module

LOW 21

Buffer overflow vulnerability in the file preview module.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00166 Published 2026-11-02 No fix listed CWE-19

TI-2026-83759 CVE-2026-101175 · GHSA-9fx2-fwgq-ffh5

Null pointer dereference in the Huawei HarmonyOS ArkWeb module

LOW 19

Null pointer dereference vulnerability in the ArkWeb module.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00161 Published 2026-11-02 No fix listed CWE-248

TI-2026-83758 CVE-2026-101171 · GHSA-q78w-j37r-f5hr

Permission control flaw in Huawei HarmonyOS background task module

LOW 16

Permission control vulnerability in the background task management module.

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00084 Published 2026-11-02 No fix listed CWE-264

TI-2026-83757 CVE-2026-101170 · GHSA-h9qf-xvw8-pmr6

Denial of service in file parsing module in Huawei HarmonyOS

LOW 17

DoS vulnerability in the file parsing module.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00088 Published 2026-11-02 No fix listed CWE-115

TI-2026-83755 CVE-2026-101172 · GHSA-738v-h225-334f

Permission control flaw in Huawei HarmonyOS graphics module

LOW 26

Permission control vulnerability in the graphics module.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00092 Published 2026-11-02 No fix listed CWE-264

TI-2026-71788 CVE-2026-65200 · GHSA-62hr-2w2v-p8gj

Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses

LOW 16

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size f…

CVSS 3.1LOW 3.5 Physical No auth No interaction EPSS 0.00143 Published 2026-10-13 No fix listed CWE-191

TI-2026-71787 CVE-2026-65199 · GHSA-246r-j53h-wrm2

Huawei openUBMC gives low-privilege SNMP users admin rights

LOW 23

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0015 Published 2026-10-13 No fix listed CWE-266

TI-2026-71786 CVE-2026-65198 · GHSA-5754-6w67-33hx

Hard-coded SNMPv3 USM key in Huawei openUBMC

MEDIUM 42

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00189 Published 2026-10-13 No fix listed CWE-321

TI-2026-56305 CVE-2026-81645 · GHSA-pj37-53vg-9phx

Out-of-bounds read in Huawei HarmonyOS

LOW 25

Out-of-bounds read vulnerability in the graphics module.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0009 Published 2026-09-24 No fix listed CWE-125

TI-2026-36498 CVE-2026-49313 · GHSA-ccc7-256w-2774

Access control flaw in Huawei HarmonyOS

LOW 24

Permission control vulnerability in the app lock module.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00109 Published 2026-09-09 No fix listed CWE-264

TI-2026-36494 CVE-2026-49309 · GHSA-89hm-qv2c-76vc

Access control flaw in Huawei HarmonyOS

LOW 21

Permission control vulnerability in the Settings module.

CVSS 3.1MEDIUM 4.8 Physical No auth User interaction EPSS 0.00114 Published 2026-09-09 No fix listed CWE-264

TI-2026-30381 CVE-2026-41987 · GHSA-j55r-q6cm-mr6c

Access control flaw in Huawei HarmonyOS

LOW 26

Permission control vulnerability in the app management module.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00114 Published 2026-09-09 No fix listed CWE-264

TI-2026-36500 CVE-2026-49315 · GHSA-8mmc-cqvx-vp2j

Access control flaw in Huawei HarmonyOS

LOW 30

DoS vulnerability in the input device module.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00114 Published 2026-09-09 No fix listed CWE-264

Vulnerabilities

Filters