Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.1%	CVE-2025-54647Huawei HarmonyOS · Out-of-bounds Read Medium5.4EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54647 Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-125	CVE Database V5	2025-08-06
Medium	5.1	EPSS <0.1%	CVE-2025-54646Huawei HarmonyOS · Improper Handling of Length Parameter Inconsistency Medium5.1EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54646 Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance. EPSS <0.1%Vulnerability CWE-130	CVE Database V5	2025-08-06
Medium	5.0	EPSS <0.1%	CVE-2025-54645Huawei HarmonyOS · Improper Validation of Array Index Medium5.0EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54645 Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-129	CVE Database V5	2025-08-06
Medium	6.6	EPSS <0.1%	CVE-2025-54644Huawei HarmonyOS · Out-of-bounds Read Medium6.6EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54644 Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-08-06
Medium	6.6	EPSS <0.1%	CVE-2025-54643Huawei HarmonyOS · Out-of-bounds Read Medium6.6EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54643 Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-08-06
Medium	6.7	EPSS <0.1%	CVE-2025-54642Huawei HarmonyOS · Improper Input Validation Medium6.7EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54642 Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-20	CVE Database V5	2025-08-06
Medium	6.7	EPSS <0.1%	CVE-2025-54641Huawei HarmonyOS · Improper Input Validation Medium6.7EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54641 Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-20	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-54640Huawei HarmonyOS · Deserialization of Untrusted Data Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54640 ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions. EPSS 0.1%Vulnerability CWE-502	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-54639Huawei HarmonyOS · Deserialization of Untrusted Data Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54639 ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions. EPSS 0.1%Vulnerability CWE-502	CVE Database V5	2025-08-06
Medium	5.5	EPSS <0.1%	CVE-2025-54638Huawei HarmonyOS · Deserialization of Untrusted Data Medium5.5EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54638 Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service. EPSS <0.1%Vulnerability CWE-502	CVE Database V5	2025-08-06
Medium	4.4	EPSS <0.1%	CVE-2025-54637Huawei HarmonyOS · Out-of-bounds Read Medium4.4EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54637 Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-08-06
Medium	4.4	EPSS <0.1%	CVE-2025-54636Huawei HarmonyOS · Improper Input Validation Medium4.4EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54636 Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-20	CVE Database V5	2025-08-06
Medium	5.9	EPSS 0.1%	CVE-2025-54635Huawei HarmonyOS · Use After Free Medium5.9EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54635 Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-416	CVE Database V5	2025-08-06
High	8.0	EPSS <0.1%	CVE-2025-54634Huawei HarmonyOS · Improper Handling of Exceptional Conditions High8.0EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54634 Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-755	CVE Database V5	2025-08-06
Medium	6.7	EPSS <0.1%	CVE-2025-54633Huawei HarmonyOS · Out-of-bounds Read Medium6.7EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54633 Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-08-06
Medium	6.8	EPSS 0.1%	CVE-2025-54632Huawei HarmonyOS · Classic Buffer Overflow Medium6.8EPSS 0.1%2025-08-06CVE Database V5CVE-2025-54632 Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. EPSS 0.1%Vulnerability CWE-120	CVE Database V5	2025-08-06
Medium	6.7	EPSS <0.1%	CVE-2025-54631Huawei HarmonyOS · Integer Overflow or Wraparound Medium6.7EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54631 Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-190	CVE Database V5	2025-08-06
Medium	6.8	EPSS 0.2%	CVE-2025-54630Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.8EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54630 :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-122	CVE Database V5	2025-08-06
Medium	6.7	EPSS <0.1%	CVE-2025-54629Huawei HarmonyOS · Race Condition Medium6.7EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54629 Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2025-08-06
Medium	5.3	EPSS 0.2%	CVE-2025-54628Huawei HarmonyOS · Range Error Medium5.3EPSS 0.2%2025-08-06CVE Database V5CVE-2025-54628 Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-118	CVE Database V5	2025-08-06

Page 11 of 15