CVE Vulnerability Catalog

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.

Huawei USG6300 and USG6600 devices with specific software versions have a vulnerability related to a weak algorithm. Attackers may exploit this vulnerability to crack the cipher text, leading to leaks of confidential information during transmission.

Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, potentially leading to smartphone restart or arbitrary code execution.

Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, which can lead to smartphone restart or arbitrary code execution.

Huawei firewall products USG9500 V500R001C50 have a DoS vulnerability. A remote attacker controlling the peer device could exploit this vulnerability by sending malformed IKE packets to the target device.

The Madapt Driver of some Huawei smart phones with software earlier than versions Vicky-AL00AC00B172, Vicky-AL00CC768B122, Vicky-TL00AC01B167, earlier than versions Victoria-AL00AC00B172, Victoria-TL00AC00B123, Victoria-TL00AC01B167 has a use after free (UAF) vulnerability. An attacker can trick a user to install a malicious application which has a high privilege to exploit this vulnerability.

Some Huawei smartphones with software AGS-L09C233B019, AGS-W09C233B019, KOB-L09C233B017, KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but later accesses that variable using a different type, which may lead to buffer overflow and execution of malicious code.

The outdoor unit of the CPE product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. An attacker with access to the network between the indoor and outdoor units can send commands to the outdoor unit and execute them without authentication.

Huawei VMall (for Android) with versions before 1.5.8.5 has a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app that can send HTTP requests and execute JavaScript code on web pages without obtaining Internet access permission.

The boot loaders of Huawei P10 and P10 Plus have an arbitrary memory write vulnerability due to a lack of parameter validation. An attacker with root privileges may trick a user into installing a malicious app that modifies data, leading to arbitrary memory writing on the next system reboot.

Devices AC6005, AC6605, AR1200, AR200, AR3200, CloudEngine 12800, 5800, 6800, 7800, 8800, E600, S12700, S1700, S2300, and S2700 have a vulnerability that may lead to unauthorized access to the system. The issue affects specific software versions that are not adequately secured.

The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smartphones with software versions earlier than MHA-AL00BC00B221 and LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker can trick a user into installing a malicious application, which can start multiple threads and try to create and free specific memory, potentially leading to system crashes or arbitrary code execution.

The Touch Panel driver in P10 Plus smartphones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with root privileges of the Android system can trick a user into installing a malicious application, which can start multiple threads and try to free specific memory, potentially leading to a system crash or arbitrary code execution.

The soundtrigger driver in P9 Plus smartphones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker can trick a user into installing a malicious application that starts multiple threads and tries to free specific memory, which could lead to a system crash or arbitrary code execution.

HedEx versions earlier than V200R006C00 have a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.

HedEx versions earlier than V200R006C00 has a DLL hijacking vulnerability due to calling the DLL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit this vulnerability to gain root privileges by sending malicious commands.

FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending malicious commands.

Huawei iManager NetEco with software versions V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device.