
CVE-2024-39671
https://notcve.org/view.php?id=CVE-2024-39671
25 Jul 2024 — Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. • https://consumer.huawei.com/en/support/bulletin/2024/7 • CWE-840: Business Logic Errors •

CVE-2023-7271
https://notcve.org/view.php?id=CVE-2023-7271
25 Jul 2024 — Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability. Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/7 • CWE-840: Business Logic Errors •

CVE-2024-39670
https://notcve.org/view.php?id=CVE-2024-39670
25 Jul 2024 — Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability. Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/7 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2024-39674
https://notcve.org/view.php?id=CVE-2024-39674
25 Jul 2024 — Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability. Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/7 • CWE-312: Cleartext Storage of Sensitive Information •

CVE-2024-39673
https://notcve.org/view.php?id=CVE-2024-39673
25 Jul 2024 — Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. • https://consumer.huawei.com/en/support/bulletin/2024/7 • CWE-26: Path Traversal: '/dir/../filename' •

CVE-2024-5465
https://notcve.org/view.php?id=CVE-2024-5465
14 Jun 2024 — Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidades de funciones en el módulo Calendario Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2024-5464
https://notcve.org/view.php?id=CVE-2024-5464
14 Jun 2024 — Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Vulnerabilidad de verificación de permisos insuficiente en el módulo NearLink Impacto: la explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio. Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentialit... • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2024-36503
https://notcve.org/view.php?id=CVE-2024-36503
14 Jun 2024 — Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de gestión de memoria en el módulo Gralloc Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-908: Use of Uninitialized Resource •

CVE-2024-36502
https://notcve.org/view.php?id=CVE-2024-36502
14 Jun 2024 — Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. Vulnerabilidad de lectura fuera de los límites en el módulo de audio Impacto: la explotación exitosa de esta vulnerabilidad afectará la disponibilidad. Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-125: Out-of-bounds Read •

CVE-2024-36501
https://notcve.org/view.php?id=CVE-2024-36501
14 Jun 2024 — Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity. Vulnerabilidad de administración de memoria en el módulo de tiempo de arranque Impacto: la explotación exitosa de esta vulnerabilidad puede afectar la integridad. Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity. • https://consumer.huawei.com/en/support/bulletin/2024/6 • CWE-787: Out-of-bounds Write •