
CVE-2024-39673
https://notcve.org/view.php?id=CVE-2024-39673
25 Jul 2024 — Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. • https://consumer.huawei.com/en/support/bulletin/2024/7 • CWE-26: Path Traversal: '/dir/../filename' •

CVE-2024-36503
https://notcve.org/view.php?id=CVE-2024-36503
14 Jun 2024 — Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de gestión de memoria en el módulo Gralloc Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-908: Use of Uninitialized Resource •

CVE-2024-36502
https://notcve.org/view.php?id=CVE-2024-36502
14 Jun 2024 — Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de lectura fuera de los límites en el módulo de audio Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-125: Out-of-bounds Read •

CVE-2024-36501
https://notcve.org/view.php?id=CVE-2024-36501
14 Jun 2024 — Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity. Vulnerabilidad de administración de memoria en el módulo de tiempo de arranque Impacto: la explotación exitosa de esta vulnerabilidad puede afectar la integridad. Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-787: Out-of-bounds Write •

CVE-2024-36500
https://notcve.org/view.php?id=CVE-2024-36500
14 Jun 2024 — Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Vulnerabilidad de escalada de privilegios en el módulo AMS Impacto: la explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio. Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-269: Improper Privilege Management •

CVE-2024-36499
https://notcve.org/view.php?id=CVE-2024-36499
14 Jun 2024 — Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Vulnerabilidad de captura de pantalla no autorizada en el módulo WMS Impacto: la explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio. Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-269: Improper Privilege Management •

CVE-2023-52721
https://notcve.org/view.php?id=CVE-2023-52721
11 May 2024 — The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. El módulo WindowManager tiene una vulnerabilidad en el control de permisos. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad. The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. • https://consumer.huawei.com/en/support/bulletin/2024/5 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2024-4046
https://notcve.org/view.php?id=CVE-2024-4046
11 May 2024 — Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de craqueo en el módulo de seguridad del sistema operativo Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/5 • CWE-840: Business Logic Errors •

CVE-2024-32999
https://notcve.org/view.php?id=CVE-2024-32999
11 May 2024 — Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de craqueo en el módulo de seguridad del sistema operativo Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/5 • CWE-840: Business Logic Errors •

CVE-2024-32998
https://notcve.org/view.php?id=CVE-2024-32998
11 May 2024 — NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de acceso al puntero NULL en el módulo de reloj Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/5 • CWE-824: Access of Uninitialized Pointer •