Wen Guanxing

**Name of the Vulnerable Software and Affected Versions** BatteryHealthActivity (affected versions not specified) **Description** The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this issue by a malicious app can cause service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions mentioned, use: (affected versions not specified) **Description** The issue is related to configuration problems in some smartphones. It may lead to kernel privilege escalation, resulting in system service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Some smartphones (affected versions not specified) **Description** The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this issue may cause system service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Some smartphones (affected versions not specified) **Description** The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Some smartphones (affected versions not specified) **Description** The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this issue may cause system service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Some smartphones (affected versions not specified) **Description** The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this issue may cause system service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Smartphones (affected versions not specified) **Description** The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HISP module (affected versions not specified) **Description** The issue is related to the HISP module not verifying data transferred in the kernel space, which can lead to an out-of-bounds read when successfully exploited, affecting data confidentiality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HIPP module (affected versions not specified) **Description** The issue is related to the HIPP module not verifying data transferred in the kernel space. This can lead to an out-of-bounds read when successfully exploited, affecting data confidentiality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Facial Recognition Module (affected versions not specified) **Description** The issue is related to a vulnerability in input validation within the facial recognition module. This could potentially impact data confidentiality if successfully exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HIPP module (affected versions not specified) **Description** The issue concerns a vulnerability in the HIPP module that allows bypassing the check of the data transferred in the kernel space. Successful exploitation may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fingerprint trusted application (TA) (affected versions not specified) **Description** The issue concerns heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application. Successful exploitation may affect the fingerprint service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HISP module (affected versions not specified) **Description** The issue concerns a vulnerability in the HISP module that allows bypassing the check of the data transferred in the kernel space. Successful exploitation of this issue may cause unauthorized access to the HISP module. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned. **Description** The issue is an out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this issue may cause the system to restart. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions mentioned. **Description** The issue is related to an out-of-bounds write vulnerability in the kernel modules. This could potentially cause a panic reboot if successfully exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei headset products (affected versions not specified) **Description** The issue concerns an out-of-bounds read and write vulnerability. An attacker, with physical access to the device, can craft a malformed message with a specific parameter and send it to the affected products. Due to insufficient validation of the message, this may be exploited to cause out-of-bounds read and write, potentially allowing the attacker to read or write arbitrary files in the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Setting module (affected versions not specified) **Description** The issue concerns the improper use of APIs within the setting module. This could potentially impact data confidentiality if successfully exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HwSEServiceAPP (affected versions not specified) **Description** The issue is related to a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChinaDRM (affected versions not specified) **Description** The issue concerns the ChinaDRM module, where residual files are not deleted after an update. This could potentially impact availability if successfully exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** kernel emcom module (affected versions not specified) **Description** The issue is related to multi-thread contention in the kernel emcom module. Successful exploitation of this issue may affect system availability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.