Huawei vulnerabilities

Published CVEs affecting Huawei products: 196 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-65200 Low · 3.5 CWE-191 Oct 13, 2026

Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length without a lower-bound check. An undersized response wraps the unsigned length difference to a very large value, and the parser then reads far past the response buffer. The affected code sits in the base (non-vendor) PLDM control class and the Huawei NCSI driver, so it is reachable for any PLDM endpoint or Huawei NIC on the internal management bus, unlike the vendor-specific wangxun parser tracked separately.

CVE-2026-65199 Medium · 5.4 CWE-266 Oct 13, 2026

Huawei openUBMC low-privilege SNMP to administrator privilege escalation

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.

CVE-2026-65198 High · 8.6 CWE-321 Oct 13, 2026

Huawei Default SNMPv3 USM key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades.

CVE-2026-81645 Medium · 5.9 CWE-125 Sep 24, 2026

Out-of-bounds Read in Huawei Harmonyos

Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.

CVE-2026-81647 Medium · 5.3 CWE-680 Sep 9, 2026

Integer Overflow to Buffer Overflow in Huawei Harmonyos

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-81646 Medium · 5.9 CWE-125 Sep 9, 2026

Out-of-bounds Read in Huawei Harmonyos

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-81644 Medium · 4.3 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49315 High · 7.1 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49314 High · 7.3 CWE-125 Sep 9, 2026

Out-of-bounds Read in Huawei Harmonyos

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49313 Medium · 5.5 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49312 Medium · 4.0 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49311 Medium · 6.2 CWE-275 Sep 9, 2026

Permission control vulnerability in the event notification module.Impact: Successful…

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49310 High · 8.6 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49309 Medium · 4.8 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41987 Medium · 6.2 CWE-264 Sep 9, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58561 Medium · 4.0 CWE-476 Aug 17, 2026

NULL Pointer Dereference in Huawei Harmonyos

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58560 Medium · 4.0 CWE-476 Aug 17, 2026

NULL Pointer Dereference in Huawei Harmonyos

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49308 Medium · 5.5 CWE-264 Aug 17, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49307 Medium · 6.2 CWE-200 Aug 17, 2026

Exposure of Sensitive Information in Huawei Harmonyos

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49306 Low · 3.3 CWE-416 Aug 17, 2026

Use After Free in Huawei Harmonyos

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49305 Medium · 6.2 CWE-755 Aug 17, 2026

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful…

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49304 Medium · 6.2 CWE-264 Aug 17, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49303 Medium · 5.1 CWE-264 Aug 17, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49302 Medium · 6.2 CWE-200 Aug 17, 2026

Exposure of Sensitive Information in Huawei Harmonyos

Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-49301 Medium · 6.2 CWE-200 Aug 17, 2026

Exposure of Sensitive Information in Huawei Harmonyos

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.