Huawei

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Huawei product.

RSS Feeds for Huawei security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Huawei products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Huawei Sorted by Most Security Vulnerabilities since 2018

Huawei Harmonyos1080 vulnerabilities

Huawei Emui818 vulnerabilities

Huawei Fusioncompute11 vulnerabilities

Huawei Openeuler8 vulnerabilities

Huawei Bisheng Wnm Firmware7 vulnerabilities

Huawei Smc2 05 vulnerabilities

Huawei Curiem Wfg9b Firmware5 vulnerabilities

Huawei Cv81 Wdm Firmware4 vulnerabilities

Huawei Imanager Neteco 60003 vulnerabilities

Huawei Aslan Al10 Firmware3 vulnerabilities

Huawei Ws7200 10 Firmware2 vulnerabilities

Huawei B612 Firmware2 vulnerabilities

Huawei Cv81 Wdm Fw Firmware1 vulnerability

Huawei Opengauss1 vulnerability

Huawei Ota Bisheng Firmware1 vulnerability

Huawei Atune1 vulnerability

Huawei Simba Al00 Firmware1 vulnerability

Huawei Ws7100 20 Firmware1 vulnerability

Huawei Fusioncompute Firmware1 vulnerability

Huawei Flmg 10 Firmware1 vulnerability

Huawei Hota Fara B19 Firmware1 vulnerability

Huawei Egrt 00 Firmware1 vulnerability

Huawei Myna Firmware1 vulnerability

Huawei Jad Al50 Firmware1 vulnerability

Huawei Leia B29 Firmware1 vulnerability

Huawei Lion Al00c Firmware1 vulnerability

Huawei E5573cs 322 Firmware1 vulnerability

Huawei Mate 20 Firmware1 vulnerability

Huawei Mate 20 Pro Firmware1 vulnerability

Huawei Mate 30 Firmware1 vulnerability

By the Year

In 2026 there have been 135 vulnerabilities in Huawei with an average score of 5.7 out of ten. Last year, in 2025 Huawei had 189 security vulnerabilities published. Right now, Huawei is on track to have less security vulnerabilities in 2026 than it did last year. Last year, the average CVE base score was greater by 0.44

Year	Vulnerabilities	Average Score
2026	135	5.74
2025	189	6.18
2024	209	6.62
2023	249	7.49
2022	313	7.51
2021	255	7.35
2020	39	7.10
2019	35	6.91
2018	5	0.00

It may take a day or so for new Huawei vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Huawei Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-65200	Oct 13, 2026	openUBMC PLDM/MCTP Response Length Validation Flaw (CVE-2026-65200) The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length without a lower-bound check. An undersized response wraps the unsigned length difference to a very large value, and the parser then reads far past the response buffer. The affected code sits in the base (non-vendor) PLDM control class and the Huawei NCSI driver, so it is reachable for any PLDM endpoint or Huawei NIC on the internal management bus, unlike the vendor-specific wangxun parser tracked separately.
CVE-2026-65199	Oct 13, 2026	openUBMC Privilege Escalation via SNMP Pseudo-Identity openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.
CVE-2026-65198	Oct 13, 2026	Huawei openUBMC SNMPv3 USM Key Exposure via Default Constants Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades.
CVE-2026-81645	Sep 24, 2026	Huawei Graphics Module OOB Read, Availability Impact Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49313	Sep 09, 2026	Permission Control Vulnerability in Huawei AppLock Module Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49309	Sep 09, 2026	CVE-2026-49309: Huawei Settings Module Permission Control Vulnerability Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-41987	Sep 09, 2026	Huawei App Management Module: Permission Control Vulnerability (CVE-2026-41987) Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-49315	Sep 09, 2026	DoS vulnerability in Huawei Input Device Module DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-81647	Sep 09, 2026	OOB read in Huawei graphics module may cause DoS Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-81646	Sep 09, 2026	Huawei Graphics Module OOB Read Causing A/V Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-81644	Sep 09, 2026	Huawei Preview Service DoS via Preview Module DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49312	Sep 09, 2026	Huawei window module Permission Control Vulnerability Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49310	Sep 09, 2026	Huawei Event Notification Module Permission Control Vulnerability Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49314	Sep 09, 2026	Huawei (Android) OOB Write in Rendering & Composition Module OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49311	Sep 09, 2026	Huawei Permission Control Flaw in Event Notification Module (CVE-2026-49311) Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49303	Aug 17, 2026	Huawei Notification Module Permission Misuse Availability Disruption Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-49301	Aug 17, 2026	Huawei Gallery Permission Control Flaw Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-49305	Aug 17, 2026	Permission Control Vulnerability in Huawei WiFi Enhancement Module Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-49308	Aug 17, 2026	Huawei HarmonyOS Clipboard Permission Control CVE-2026-49308 Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-49306	Aug 17, 2026	Huawei Router OS: Time Module UAF Crash Vulnerability UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49304	Aug 17, 2026	HUAWEI Device Key Mgmt Module Permission Control Flaw Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49302	Aug 17, 2026	Huawei Notification Service Permission Control Vulnerability Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58561	Aug 17, 2026	Huawei Image Codec NPD: Null Pointer Deref Affecting Availability Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-58560	Aug 17, 2026	Huawei Image Codec NPE in Codec Module Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-49307	Aug 17, 2026	Huawei Multi-Mode Input Module Permission Control Vulnerability Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58559	Jul 15, 2026	DoS Vulnerability in Huawei Android Vibration Service DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-58558	Jul 15, 2026	Huawei File System Permission Control Vulnerability Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-58556	Jul 15, 2026	Permission Control Flaw in Huawei Bluetooth Module Enables DoS Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-58557	Jul 15, 2026	Design Defect in Huawei Expedition Mode Causing DoS Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-58554	Jul 15, 2026	Huawei Settings Module Permission Control Flaw Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-58555	Jul 15, 2026	Permission Bypass in Huawei Card Module Causing Availability Issues Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-58553	Jul 15, 2026	Huawei Image Codec OOB Read May Leak Confidential Service Data Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58552	Jul 15, 2026	Huawei Image Codec OOB Read Vulnerability (CVE-2026-58552) Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58551	Jul 15, 2026	Huawei Image Codec OOB Read Service Confidentiality Risk Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58550	Jul 15, 2026	OOB Read in Huawei Image Codec Module (CVE-2026-58550) Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-58549	Jul 15, 2026	Huawei Image Codec OOB Read (CVE-2026-58549) Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-41982	Jun 09, 2026	Huawei IPC module race condition impacting availability Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-41981	Jun 09, 2026	OOB Write in Huawei IPC Module (CVE-2026-41981) Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-41977	Jun 09, 2026	Denial of Service in Huawei Log Service DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-41976	Jun 09, 2026	Huawei Audio Framework Permission Control Vulnerability Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos Emui
CVE-2026-41974	Jun 09, 2026	CVE-2026-41974: Permission Control Flaw in Huawei Service Notifications Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-41973	Jun 09, 2026	Huawei Telephony Calls permissioncontrol flaw (CVE202641973) Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos Emui
CVE-2026-41972	Jun 09, 2026	Path Traversal Vuln in Huawei SMS App - Availability Impact Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-41986	Jun 09, 2026	HUAWEI FS Logic Bypass Causing Availability Drop Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-41985	Jun 09, 2026	UAF in Huawei Package Manager UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.	Harmonyos
CVE-2026-41984	Jun 09, 2026	UAF in Huawei Package Management Module UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.	Harmonyos
CVE-2026-41983	Jun 09, 2026	Huawei Browser Kernel DoS Exploit Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.	Harmonyos
CVE-2026-41980	Jun 09, 2026	Permission Control Vulnerability in Huawei File Preview Module Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos
CVE-2026-41979	Jun 09, 2026	Huawei Print Module Permission Control Flaw (CVE-2026-41979) Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.	Harmonyos
CVE-2026-41978	Jun 09, 2026	Permission Control Flaw in Huawei Clone Module Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	Harmonyos