Huawei vulnerabilities
Published CVEs affecting Huawei products: 197 record(s), with severity, exploitation and fixes.
Harmonyos 189Emui 40Agile Controller-campus Firmware 2Oceanstor 18800f Firmware 2Oceanstor 9000 Firmware 2Berkeley-l09 Firmware 2Columbia-l29d Firmware 2Cornell-tl10b Firmware 2Dura-al00a Firmware 2Nova 3 Firmware 2Honor View 20 Firmware 2Jakarta-al00a Firmware 2Princeton-al10b Firmware 2Sydney-al00 Firmware 2Sydney-tl00 Firmware 2Sydneym-al00 Firmware 2Tony-al00b Firmware 2Tony-tl00b Firmware 2Yale-al00a Firmware 2Yale-l21a Firmware 2openBMC 2Anyoffice 1Logcenter 1Firehunter6000 Firmware 1Oceanstor 5300 V3 Firmware 1Oceanstor 5500 V3 Firmware 1Oceanstor 5600 V3 Firmware 1Oceanstor 5800 V3 Firmware 1Oceanstor 6800 V3 Firmware 1Oceanstor 18500 V3 Firmware 1Oceanstor 18500f Firmware 1Oceanstor 18800 V3 Firmware 1Oceanstor N8500 Firmware 1Oceanstor Onebox Firmware 1Alp-al00b Firmware 1Alp-tl00b Firmware 1Anne-al00 Firmware 1Ares-al00b Firmware 1Ares-al10d Firmware 1Ares-tl00chw Firmware 1
CVE-2025-58298
Medium · 5.5
CWE-121 Oct 11, 2025
Stack-based Buffer Overflow in Huawei Harmonyos
Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58297
Medium · 5.5
CWE-121 Oct 11, 2025
Stack-based Buffer Overflow in Huawei Harmonyos
Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58295
Medium · 5.5
CWE-121 Oct 11, 2025
Stack-based Buffer Overflow in Huawei Harmonyos
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58292
Medium · 5.5
CWE-27 Oct 11, 2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58291
Medium · 5.5
CWE-29 Oct 11, 2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58290
Medium · 5.5
CWE-41 Oct 11, 2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58288
Medium · 5.5
CWE-275 Oct 11, 2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58287
Medium · 5.5
CWE-416 Oct 11, 2025
Use After Free in Huawei Harmonyos
Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58286
Medium · 5.5
CWE-25 Oct 11, 2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58285
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58284
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58283
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58282
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58278
Medium · 5.5
CWE-200 Oct 11, 2025
Exposure of Sensitive Information in Huawei Harmonyos
Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58277
Medium · 5.5
CWE-200 Oct 11, 2025
Exposure of Sensitive Information in Huawei Harmonyos
Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-54654
Medium · 5.5
CWE-264 Oct 10, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
CVE-2025-58276
Medium · 5.5
CWE-264 Sep 5, 2025
Permission verification vulnerability in the home screen module
Impact: Successful exploitation...
Permission verification vulnerability in the home screen module
Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2020-0069
High · 7.8
KEV High · 58 Public exploit CWE-787 Mar 10, 2020
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
CVE-2020-8840
Critical · 9.8
CWE-502 Feb 10, 2020
Deserialization of Untrusted Data in Fasterxml Jackson-databind
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
CVE-2019-2215
High · 7.8
KEV Urgent · 76 Public exploit CWE-416 Oct 11, 2019
Android Kernel Use-After-Free Vulnerability
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2019-0708
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-416 May 16, 2019
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
CVE-2016-3081
High · 8.1
KEV Urgent · 76 Public exploit CWE-77 Apr 26, 2016
Apache Struts Command Injection Vulnerability
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.