Huawei vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Huawei products: 196 record(s), with severity, exploitation and fixes.

Harmonyos 188 Emui 39 Agile Controller-campus Firmware 2 Oceanstor 18800f Firmware 2 Oceanstor 9000 Firmware 2 Berkeley-l09 Firmware 2 Columbia-l29d Firmware 2 Cornell-tl10b Firmware 2 Dura-al00a Firmware 2 Nova 3 Firmware 2 Honor View 20 Firmware 2 Jakarta-al00a Firmware 2 Princeton-al10b Firmware 2 Sydney-al00 Firmware 2 Sydney-tl00 Firmware 2 Sydneym-al00 Firmware 2 Tony-al00b Firmware 2 Tony-tl00b Firmware 2 Yale-al00a Firmware 2 Yale-l21a Firmware 2 openBMC 2 Anyoffice 1 Logcenter 1 Firehunter6000 Firmware 1 Oceanstor 5300 V3 Firmware 1 Oceanstor 5500 V3 Firmware 1 Oceanstor 5600 V3 Firmware 1 Oceanstor 5800 V3 Firmware 1 Oceanstor 6800 V3 Firmware 1 Oceanstor 18500 V3 Firmware 1 Oceanstor 18500f Firmware 1 Oceanstor 18800 V3 Firmware 1 Oceanstor N8500 Firmware 1 Oceanstor Onebox Firmware 1 Alp-al00b Firmware 1 Alp-tl00b Firmware 1 Anne-al00 Firmware 1 Ares-al00b Firmware 1 Ares-al10d Firmware 1 Ares-tl00chw Firmware 1

Exploited only (KEV) →

CVE-2026-28536 High · 8.1 CWE-305 Mar 5, 2026

Authentication bypass vulnerability in the device authentication module. Impact…

Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVE-2026-24928 Medium · 5.5 CWE-787 Feb 6, 2026

Out-of-bounds Write in Huawei Emui

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24927 Medium · 5.5 CWE-416 Feb 6, 2026

Use After Free in Huawei Emui

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24924 Medium · 5.5 CWE-264 Feb 6, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24920 Medium · 5.5 CWE-264 Feb 6, 2026

Permissions, Privileges, and Access Controls in Huawei Emui

Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24931 Medium · 5.5 CWE-264 Feb 6, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24930 Medium · 5.5 CWE-416 Feb 6, 2026

Use After Free in Huawei Harmonyos

UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24929 Medium · 4.4 CWE-125 Feb 6, 2026

Out-of-bounds Read in Huawei Harmonyos

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24926 Medium · 5.5 CWE-787 Feb 6, 2026

Out-of-bounds Write in Huawei Harmonyos

Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24925 Medium · 5.5 CWE-787 Feb 6, 2026

Out-of-bounds Write in Huawei Harmonyos

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24923 Medium · 5.5 CWE-264 Feb 6, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24922 Medium · 5.5 CWE-120 Feb 6, 2026

Classic Buffer Overflow in Huawei Harmonyos

Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24921 High · 7.1 CWE-125 Feb 6, 2026

Out-of-bounds Read in Huawei Harmonyos

Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2026-24919 Medium · 5.5 CWE-787 Feb 6, 2026

Out-of-bounds Write in Huawei Emui

Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24918 Medium · 5.5 CWE-476 Feb 6, 2026

NULL Pointer Dereference in Huawei Emui

Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24917 Medium · 5.5 CWE-416 Feb 6, 2026

Use After Free in Huawei Emui

UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-24916 Medium · 5.5 CWE-200 Feb 6, 2026

Exposure of Sensitive Information in Huawei Harmonyos

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-24915 High · 7.1 CWE-125 Feb 6, 2026

Out-of-bounds Read in Huawei Harmonyos

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2026-24914 Medium · 5.5 CWE-843 Feb 6, 2026

Type Confusion in Huawei Harmonyos

Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68970 Medium · 5.5 CWE-20 Jan 14, 2026

Improper Input Validation in Huawei Emui

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68969 Medium · 4.7 CWE-362 Jan 14, 2026

Race Condition in Huawei Harmonyos

Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-68968 High · 7.8 CWE-415 Jan 14, 2026

Double Free in Huawei Harmonyos

Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function.

CVE-2025-68967 Medium · 5.5 CWE-264 Jan 14, 2026

Permissions, Privileges, and Access Controls in Huawei Harmonyos

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68966 Medium · 5.5 CWE-200 Jan 14, 2026

Exposure of Sensitive Information in Huawei Harmonyos

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-68965 Medium · 5.5 CWE-200 Jan 14, 2026

Exposure of Sensitive Information in Huawei Harmonyos

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.