The system service has a vulnerability that causes incorrect return values

The system tool has inconsistent serialization and deserialization

The backup module has a path traversal vulnerability

The multi-screen collaboration module has a path traversal vulnerability

The preset launcher module has a permission verification vulnerability

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files

The DDMP/ODMF module has a service hijacking vulnerability

The power module has a vulnerability in permission verification

The lock screen module has defects introduced in the design process

The graphics display module has a UAF vulnerability when traversing graphic layers

The LBS module has a vulnerability in geofencing API access

The Display Service module has a UAF vulnerability

The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released

The memory management module has the logic bypass vulnerability

Missing parameter type validation in the DRM module

The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device…

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity

The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality

The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this…

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability

The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access…

The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which…

The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality

The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which…

The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage

The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data

The HwChrService module has a vulnerability in permission control

The MPTCP module has the memory leak vulnerability

The MPTCP module has the memory leak vulnerability

The number identification module has a path traversal vulnerability

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

The secure OS module has configuration defects

Implementation of the WLAN module interfaces has the information disclosure vulnerability

Implementation of the WLAN module interfaces has the information disclosure vulnerability

Permission control vulnerability in the network module

Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module

The My HUAWEI app has a defect in the design

The Settings application has an argument injection vulnerability

The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE)