Huawei

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Huawei product.

RSS Feeds for Huawei security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Huawei products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Huawei Sorted by Most Security Vulnerabilities since 2018

Huawei Harmonyos1097 vulnerabilities

Huawei Emui822 vulnerabilities

Huawei Fusioncompute11 vulnerabilities

Huawei Openeuler8 vulnerabilities

Huawei Bisheng Wnm Firmware7 vulnerabilities

Huawei Smc2 05 vulnerabilities

Huawei Curiem Wfg9b Firmware5 vulnerabilities

Huawei Cv81 Wdm Firmware4 vulnerabilities

Huawei Imanager Neteco 60003 vulnerabilities

Huawei Aslan Al10 Firmware3 vulnerabilities

Huawei Ws7200 10 Firmware2 vulnerabilities

Huawei B612 Firmware2 vulnerabilities

Huawei Cv81 Wdm Fw Firmware1 vulnerability

Huawei Opengauss1 vulnerability

Huawei Ota Bisheng Firmware1 vulnerability

Huawei Atune1 vulnerability

Huawei Simba Al00 Firmware1 vulnerability

Huawei Ws7100 20 Firmware1 vulnerability

Huawei Fusioncompute Firmware1 vulnerability

Huawei Flmg 10 Firmware1 vulnerability

Huawei Hota Fara B19 Firmware1 vulnerability

Huawei Egrt 00 Firmware1 vulnerability

Huawei Myna Firmware1 vulnerability

Huawei Jad Al50 Firmware1 vulnerability

Huawei Leia B29 Firmware1 vulnerability

Huawei Lion Al00c Firmware1 vulnerability

Huawei E5573cs 322 Firmware1 vulnerability

Huawei Mate 20 Firmware1 vulnerability

Huawei Mate 20 Pro Firmware1 vulnerability

Huawei Mate 30 Firmware1 vulnerability

By the Year

In 2026 there have been 152 vulnerabilities in Huawei with an average score of 5.7 out of ten. Last year, in 2025 Huawei had 189 security vulnerabilities published. Right now, Huawei is on track to have less security vulnerabilities in 2026 than it did last year. Last year, the average CVE base score was greater by 0.47

Year	Vulnerabilities	Average Score
2026	152	5.71
2025	189	6.18
2024	209	6.62
2023	249	7.49
2022	313	7.51
2021	255	7.35
2020	39	7.10
2019	35	6.91
2018	5	0.00

It may take a day or so for new Huawei vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Huawei Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-101184	Nov 02, 2026	Perm. Control Flaw in Huawei Bluetooth Module (CVE-2026-101184) Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-101178	Nov 02, 2026	Huawei Autofill Service Perm Control Flaw Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-101177	Nov 02, 2026	Huawei Optimizer: Permission Control Flaw Exposes Service Confidentiality Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-101174	Nov 02, 2026	Huawei DSoftBus Module DoS Vulnerability DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101173	Nov 02, 2026	DoS Vulnerability in Huawei DSoftBus Module DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101176	Nov 02, 2026	Huawei Event Notification Management Module Permission Control Vulnerability Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-101186	Nov 02, 2026	DoS Vulnerability in Huawei HarmonyOS Window Module DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101185	Nov 02, 2026	Huawei peripheral OOB read vulnerability OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-101183	Nov 02, 2026	UAF in Huawei Location Service Module impacting availability UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101182	Nov 02, 2026	CVE-2026-101182: Race Condition in Huawei Location Service Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101181	Nov 02, 2026	Huawei WLAN Mod Perm Control VULN Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-101180	Nov 02, 2026	Huawei File Parsing DoS (CVE-2026-101180) DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101179	Nov 02, 2026	Huawei Buffer Overflow in File Preview Module Availability Impact Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101175	Nov 02, 2026	Huawei ArkWeb Null Pointer Deref Affecting Availability Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101171	Nov 02, 2026	Huawei Background Task Management Permission Control Vulnerability Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.	Harmonyos
CVE-2026-101170	Nov 02, 2026	Huawei File Parser DoS via Module Parsing DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-101172	Nov 02, 2026	Permission Control Flaw in Huawei Graphics Module Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.	Harmonyos
CVE-2026-65200	Oct 13, 2026	openUBMC PLDM/MCTP Response Length Validation Flaw (CVE-2026-65200) The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length without a lower-bound check. An undersized response wraps the unsigned length difference to a very large value, and the parser then reads far past the response buffer. The affected code sits in the base (non-vendor) PLDM control class and the Huawei NCSI driver, so it is reachable for any PLDM endpoint or Huawei NIC on the internal management bus, unlike the vendor-specific wangxun parser tracked separately.
CVE-2026-65199	Oct 13, 2026	openUBMC Privilege Escalation via SNMP Pseudo-Identity openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.
CVE-2026-65198	Oct 13, 2026	Huawei openUBMC SNMPv3 USM Key Exposure via Default Constants Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades.
CVE-2026-81645	Sep 24, 2026	Huawei Graphics Module OOB Read, Availability Impact Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49313	Sep 09, 2026	Permission Control Vulnerability in Huawei AppLock Module Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49309	Sep 09, 2026	CVE-2026-49309: Huawei Settings Module Permission Control Vulnerability Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-41987	Sep 09, 2026	Huawei App Management Module: Permission Control Vulnerability (CVE-2026-41987) Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-49315	Sep 09, 2026	DoS vulnerability in Huawei Input Device Module DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-81647	Sep 09, 2026	OOB read in Huawei graphics module may cause DoS Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-81646	Sep 09, 2026	Huawei Graphics Module OOB Read Causing A/V Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-81644	Sep 09, 2026	Huawei Preview Service DoS via Preview Module DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49312	Sep 09, 2026	Huawei window module Permission Control Vulnerability Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49310	Sep 09, 2026	Huawei Event Notification Module Permission Control Vulnerability Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49314	Sep 09, 2026	Huawei (Android) OOB Write in Rendering & Composition Module OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49311	Sep 09, 2026	Huawei Permission Control Flaw in Event Notification Module (CVE-2026-49311) Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49303	Aug 17, 2026	Huawei Notification Module Permission Misuse Availability Disruption Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-49301	Aug 17, 2026	Huawei Gallery Permission Control Flaw Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-49305	Aug 17, 2026	Permission Control Vulnerability in Huawei WiFi Enhancement Module Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-49308	Aug 17, 2026	Huawei HarmonyOS Clipboard Permission Control CVE-2026-49308 Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49306	Aug 17, 2026	Huawei Router OS: Time Module UAF Crash Vulnerability UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49304	Aug 17, 2026	HUAWEI Device Key Mgmt Module Permission Control Flaw Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49302	Aug 17, 2026	Huawei Notification Service Permission Control Vulnerability Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58561	Aug 17, 2026	Huawei Image Codec NPD: Null Pointer Deref Affecting Availability Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-58560	Aug 17, 2026	Huawei Image Codec NPE in Codec Module Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49307	Aug 17, 2026	Huawei Multi-Mode Input Module Permission Control Vulnerability Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58559	Jul 15, 2026	DoS Vulnerability in Huawei Android Vibration Service DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-58558	Jul 15, 2026	Huawei File System Permission Control Vulnerability Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-58556	Jul 15, 2026	Permission Control Flaw in Huawei Bluetooth Module Enables DoS Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-58557	Jul 15, 2026	Design Defect in Huawei Expedition Mode Causing DoS Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-58554	Jul 15, 2026	Huawei Settings Module Permission Control Flaw Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-58555	Jul 15, 2026	Permission Bypass in Huawei Card Module Causing Availability Issues Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-58553	Jul 15, 2026	Huawei Image Codec OOB Read May Leak Confidential Service Data Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58552	Jul 15, 2026	Huawei Image Codec OOB Read Vulnerability (CVE-2026-58552) Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos