Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.6	EPSS 0.2%	CVE-2026-28536Huawei HarmonyOS · Authentication Bypass by Primary Weakness Critical9.6EPSS 0.2%2026-03-05CVE Database V5CVE-2026-28536 Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. EPSS 0.2%Vulnerability CWE-305	CVE Database V5	2026-03-05
Medium	5.8	EPSS 0.1%	CVE-2026-24928Huawei HarmonyOS · Integer Overflow to Buffer Overflow Medium5.8EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24928 Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-680	CVE Database V5	2026-02-06
Medium	5.5	EPSS 0.1%	CVE-2026-24927Huawei HarmonyOS · Use After Free Medium5.5EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24927 Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-416	CVE Database V5	2026-02-06
Medium	6.1	EPSS 0.1%	CVE-2026-24924Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium6.1EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24924 Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2026-02-06
Medium	6.2	EPSS 0.1%	CVE-2026-24920Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium6.2EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24920 Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2026-02-06
Medium	6.0	EPSS 0.1%	CVE-2026-24919Huawei HarmonyOS · Out-of-bounds Write Medium6.0EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24919 Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-787	CVE Database V5	2026-02-06
Medium	6.5	EPSS 0.1%	CVE-2026-24917Huawei HarmonyOS · Use After Free Medium6.5EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24917 UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-416	CVE Database V5	2026-02-06
Medium	5.9	EPSS 0.1%	CVE-2026-24916Huawei HarmonyOS · Information Exposure Medium5.9EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24916 Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-200	CVE Database V5	2026-02-06
Medium	5.9	EPSS 0.1%	CVE-2026-24931Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium5.9EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24931 Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2026-02-06
High	8.4	EPSS <0.1%	CVE-2026-24930Huawei HarmonyOS · Race Condition High8.4EPSS <0.1%2026-02-06CVE Database V5CVE-2026-24930 UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2026-02-06
Medium	5.9	EPSS <0.1%	CVE-2026-24929Huawei HarmonyOS · NULL Pointer Dereference Medium5.9EPSS <0.1%2026-02-06CVE Database V5CVE-2026-24929 Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-476	CVE Database V5	2026-02-06
Medium	6.3	EPSS 0.1%	CVE-2026-24923Huawei HarmonyOS · Permissions, Privileges, and Access Controls Medium6.3EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24923 Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-264	CVE Database V5	2026-02-06
Medium	6.9	EPSS 0.1%	CVE-2026-24922Huawei HarmonyOS · Heap-based Buffer Overflow Medium6.9EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24922 Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-122	CVE Database V5	2026-02-06
Medium	4.8	EPSS <0.1%	CVE-2026-24921Huawei HarmonyOS · Out-of-bounds Read Medium4.8EPSS <0.1%2026-02-06CVE Database V5CVE-2026-24921 Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2026-02-06
Medium	6.8	EPSS 0.1%	CVE-2026-24918Huawei HarmonyOS · NULL Pointer Dereference Medium6.8EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24918 Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-476	CVE Database V5	2026-02-06
Medium	6.2	EPSS 0.1%	CVE-2026-24915Huawei HarmonyOS · Out-of-bounds Read Medium6.2EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24915 Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. EPSS 0.1%Vulnerability CWE-125	CVE Database V5	2026-02-06
Medium	4.0	EPSS 0.1%	CVE-2026-24914Huawei HarmonyOS · Use After Free Medium4.0EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24914 Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-416	CVE Database V5	2026-02-06
High	8.4	EPSS 0.1%	CVE-2026-24926Huawei HarmonyOS · Out-of-bounds Write High8.4EPSS 0.1%2026-02-06CVE Database V5CVE-2026-24926 Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-787	CVE Database V5	2026-02-06
High	7.3	EPSS <0.1%	CVE-2026-24925Huawei HarmonyOS · Heap-based Buffer Overflow High7.3EPSS <0.1%2026-02-06CVE Database V5CVE-2026-24925 Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-122	CVE Database V5	2026-02-06
Medium	6.2	EPSS <0.1%	CVE-2025-68959Huawei HarmonyOS · Information Exposure Medium6.2EPSS <0.1%2026-01-14CVE Database V5CVE-2025-68959 Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-200	CVE Database V5	2026-01-14

Page 6 of 15