Huawei vulnerabilities
We track 270 vulnerabilities in Huawei products across 60+ products. 270 are rated high or critical, and 4 have been exploited in real attacks. The most recent was published on November 2, 2026.
Latest Huawei vulnerabilities
- 7.1 High severity
Permission control vulnerability in the event notification management module.
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.6 High severity
openUBMC: Use of Hard-coded Cryptographic Key
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still ca
- 8.6 High severity
Permission control vulnerability in the event notification module.
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.1 Critical severity
HarmonyOS: Heap-based Buffer Overflow
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.5 High severity
Vulnerability of improper permission control in the theme setting module.
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.1 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
HarmonyOS: Exposure of Sensitive Information to an Unauthorized Actor
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
Configuration defect vulnerability in the file management module.
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.
- 7.1 High severity
HarmonyOS: Out-of-bounds Read
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.1 High severity
Permission control vulnerability in the startup recovery module.
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.5 High severity
HarmonyOS: Use After Free
Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Heap-based Buffer Overflow
:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Incorrect Access of Indexable Resource
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
- 7.4 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Improper Certificate Validation
Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
Status verification vulnerability in the lock screen module.
Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.8 High severity
HarmonyOS: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module.
- 7.6 High severity
HarmonyOS: Improper Authentication
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.
- 7.5 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.2 High severity
HarmonyOS: Incorrect Privilege Assignment
Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability.
- 8.1 High severity
HarmonyOS: Inconsistency Between Implementation and Documented Design
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.
- 7.1 High severity
HarmonyOS: Improper Access Control
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.7 High severity
HarmonyOS: Improper Access Control
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
HarmonyOS: Out-of-bounds Write
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Out-of-bounds Write
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
Vulnerability of improper resource management in the memory management module Impact…
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Uncaught Exception
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Uncaught Exception
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
Vulnerability of incomplete verification information in the VPN service module Impact…
Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful…
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.8 Critical severity
HarmonyOS: Use After Free
Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 9.1 Critical severity
HarmonyOS: Out-of-bounds Read
Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
HarmonyOS: Insertion of Sensitive Information into Log File
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Improper Authorization
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Channel Accessible by Non-Endpoint
Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.