The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE)

The recovery module has a vulnerability of bypassing the verification of an update package before use

The chinadrm module has an out-of-bounds read vulnerability

The video framework has the memory overwriting vulnerability caused by addition overflow

The AT commands of the USB port have an out-of-bounds read vulnerability

The system module has a read/write vulnerability

The fingerprint module has a vulnerability of overflow in arithmetic addition

The SystemUI module has a vulnerability in permission control

The frame scheduling module has a null pointer dereference vulnerability

The frame scheduling module has a null pointer dereference vulnerability

The basic framework and setting module have defects, which were introduced during the design

Vulnerability of pointers being incorrectly used during data transmission in the video framework

Configuration defects in the secure OS module

The setting module has a vulnerability of improper use of APIs

Logical defects in code implementation in some products

The voice wakeup module has a vulnerability of using externally-controlled format strings

Vulnerability of residual files not being deleted after an update in the ChinaDRM module

The Device Manager has a vulnerability in multi-device interaction

The video framework has an out-of-bounds memory read/write vulnerability

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services

The frame scheduling module has a null pointer dereference vulnerability

There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability

The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions

The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services

Configuration defects in the secure OS module

Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead…

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality

The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality

There is a heap-based buffer overflow vulnerability in system components

There is an improper access control vulnerability in the video module

There is a vulnerability of copying input buffer without checking its size in the video framework

There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module

There is a heap-based buffer overflow vulnerability in the video framework

There is a heap-based buffer overflow vulnerability in the video framework

There is a heap-based and stack-based buffer overflow vulnerability in the video framework

There is a vulnerability of copying input buffer without checking its size in the video framework

There is an integer underflow vulnerability in the atcmdserver module

There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability

There is an unauthorized access vulnerability in system components

There is a permission control vulnerability in the PMS module