Unauthorized service access vulnerability in the DSoftBus module

Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module

Vulnerability of inappropriate permission control in Nearby

The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality

Inappropriate authorization vulnerability in the system apps

Vulnerability of identity verification being bypassed in the storage module

Encryption bypass vulnerability in Maintenance mode

Vulnerability of unstrict data verification and parameter check

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality

The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality

The SystemUI module has a vulnerability of repeated app restart due to improper parameters

The pgmng module has a vulnerability in serialization/deserialization

The facial recognition module has a vulnerability in file permission control

The recovery mode for updates has a vulnerability that causes arbitrary disk modification

Some products have the double fetch vulnerability

The facial recognition module has a vulnerability in input parameter verification

Some smartphones have data initialization issues

The secure OS module has configuration defects

The HUAWEI Messaging app has a vulnerability of unauthorized file access

The MediaProvider module has a vulnerability in permission verification

The HwContacts module has a logic bypass vulnerability

The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality

The bundle management module lacks permission verification in some APIs

The WMS module lacks the authentication mechanism in some APIs

The WMS module lacks the authentication mechanism in some APIs

The geofencing kernel code does not verify the length of the input data

The geofencing kernel code has a vulnerability of not verifying the length of the input data

The IHwAntiMalPlugin interface lacks permission verification

The IHwAttestationService interface has a defect in authentication

The bundle management module lacks authentication and control mechanisms in some APIs

The bundle management module lacks authentication and control mechanisms in some APIs

The HwContacts module has a logic bypass vulnerability

The multi-screen collaboration module has a privilege escalation vulnerability

The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal…

The DUBAI module has a double free vulnerability

The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons

The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access

The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access

Some smartphones have the input validation vulnerability

Some smartphones have the out-of-bounds write vulnerability

The Wi-Fi module has a vulnerability in permission verification

The power consumption module has an out-of-bounds read vulnerability

The ProfileSDK has defects introduced in the design process

The IPC module has defects introduced in the design process

The application management module has a vulnerability in permission verification

The contacts component has a free (undefined) provider vulnerability

The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality