Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.0	EPSS <0.1%	CVE-2025-53171Huawei HarmonyOS · Stack-based Buffer Overflow Medium4.0EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53171 Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. EPSS <0.1%Vulnerability CWE-121	CVE Database V5	2025-07-07
Medium	4.0	EPSS <0.1%	CVE-2025-53170Huawei HarmonyOS · NULL Pointer Dereference Medium4.0EPSS <0.1%2025-07-07CVE Database V5CVE-2025-53170 Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. EPSS <0.1%Vulnerability CWE-476	CVE Database V5	2025-07-07
High	7.6	EPSS 0.2%	CVE-2025-53169Huawei HarmonyOS · Others High7.6EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53169 Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness. EPSS 0.2%Vulnerability CWE-287	CVE Database V5	2025-07-07
Medium	5.7	EPSS 0.2%	CVE-2025-53168Huawei HarmonyOS · Permission Issues Medium5.7EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53168 Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness. EPSS 0.2%Vulnerability CWE-275	CVE Database V5	2025-07-07
Medium	6.9	EPSS 0.2%	CVE-2025-53167Huawei HarmonyOS · Authentication Bypass by Primary Weakness Medium6.9EPSS 0.2%2025-07-07CVE Database V5CVE-2025-53167 Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.2%Vulnerability CWE-305	CVE Database V5	2025-07-07
Medium	6.7	EPSS <0.1%	CVE-2025-48908Huawei HarmonyOS · Unsynchronized Access to Shared Data in a Multithreaded Context Medium6.7EPSS <0.1%2025-06-06CVE Database V5CVE-2025-48908 Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-567	CVE Database V5	2025-06-06
High	8.2	EPSS 0.1%	CVE-2025-48911Huawei HarmonyOS · Incorrect Privilege Assignment High8.2EPSS 0.1%2025-06-06CVE Database V5CVE-2025-48911 Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-266	CVE Database V5	2025-06-06
Medium	5.5	EPSS 0.1%	CVE-2025-48910Huawei HarmonyOS · Heap-based Buffer Overflow Medium5.5EPSS 0.1%2025-06-06CVE Database V5CVE-2025-48910 Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-122	CVE Database V5	2025-06-06
High	7.1	EPSS 0.2%	CVE-2025-48909Huawei HarmonyOS · Improper Authentication High7.1EPSS 0.2%2025-06-06CVE Database V5CVE-2025-48909 Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.2%Vulnerability CWE-287	CVE Database V5	2025-06-06
Medium	4.0	EPSS 0.1%	CVE-2024-58114Huawei HarmonyOS · Unthrottled Resource Allocation Medium4.0EPSS 0.1%2025-06-06CVE Database V5CVE-2024-58114 Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-770	CVE Database V5	2025-06-06
Medium	6.2	EPSS 0.1%	CVE-2025-48907Huawei HarmonyOS · Uncaught Exception Medium6.2EPSS 0.1%2025-06-06CVE Database V5CVE-2025-48907 Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-248	CVE Database V5	2025-06-06
High	8.8	EPSS 0.2%	CVE-2025-48906Huawei HarmonyOS · Authentication Bypass by Spoofing High8.8EPSS 0.2%2025-06-06CVE Database V5CVE-2025-48906 Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-290	CVE Database V5	2025-06-06
High	8.1	EPSS 0.3%	CVE-2025-48905Huawei HarmonyOS · Inconsistency Between Implementation and Documented Design High8.1EPSS 0.3%2025-06-06CVE Database V5CVE-2025-48905 Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types. EPSS 0.3%Vulnerability CWE-1068	CVE Database V5	2025-06-06
Medium	4.4	EPSS 0.1%	CVE-2025-48904Huawei HarmonyOS · Authentication Bypass Using an Alternate Path or Channel Medium4.4EPSS 0.1%2025-06-06CVE Database V5CVE-2025-48904 Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-288	CVE Database V5	2025-06-06
High	7.8	EPSS 0.1%	CVE-2025-48903Huawei HarmonyOS · Permissions, Privileges, and Access Controls High7.8EPSS 0.1%2025-06-06CVE Database V5CVE-2025-48903 Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2025-06-06
Medium	6.6	EPSS <0.1%	CVE-2025-48902Huawei HarmonyOS · Range Error Medium6.6EPSS <0.1%2025-06-06CVE Database V5CVE-2025-48902 Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-118	CVE Database V5	2025-06-06
Medium	4.1	EPSS 0.1%	CVE-2025-49599Huawei EG8141A5 · Incorrect Authorization Medium4.1EPSS 0.1%2025-06-06CVE Database V5CVE-2025-49599 Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3. EPSS 0.1%Vulnerability CWE-863	CVE Database V5	2025-06-06
Medium	6.8	EPSS 0.4%	CVE-2025-31174Huawei HarmonyOS · Path Traversal Medium6.8EPSS 0.4%2025-04-07CVE Database V5CVE-2025-31174 Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.4%Vulnerability CWE-22	CVE Database V5	2025-04-07
Medium	6.8	EPSS 0.1%	CVE-2025-31171Huawei HarmonyOS · Missing Authorization Medium6.8EPSS 0.1%2025-04-07CVE Database V5CVE-2025-31171 File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-862	CVE Database V5	2025-04-07
Medium	6.8	EPSS 0.1%	CVE-2025-27521Huawei HarmonyOS · Improper Handling of Insufficient Permissions or Privileges Medium6.8EPSS 0.1%2025-03-04CVE Database V5CVE-2025-27521 Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-280	CVE Database V5	2025-03-04

Page 14 of 15