Honor Device Co., Ltd. is a smartphone and consumer electronics manufacturer whose vulnerability footprint, while modest in volume, concentrates across mobile system software and associated services including MagicOS, Baidu integration, GameCenter, PC Manager, and PhoneService components. The vendor's disclosures recur through weakness classes centered on privilege escalation, cryptographic verification flaws, type-confusion conditions, and authorization bypasses that are characteristic of the complexity inherent to mobile operating systems and their permission models. A meaningful share of the vendor's vulnerabilities reach serious severity, reflecting the access and data risks posed by flaws in firmware, system services, and inter-component communication boundaries. Defenders tracking mobile device security should monitor this vendor's updates for its core system software and service components; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Honor Device Co., Ltd. over time
Of all the CVEs published by Honor Device Co., Ltd. as a CNA, 50.0% affect products that Honor Device Co., Ltd. develops as a vendor.
Of all the CVEs published that affect products developed by Honor Device Co., Ltd., 92.9% are self-published by Honor Device Co., Ltd. as a CNA.
Signals from CVEs in this vendor scope (47 CVEs).
47 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-2188CRITICAL There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity. | Apr 17, 2025 | 9.1 | 28 | NO | NO |
CVE-2025-1532CRITICAL Phoneservice module is affected by code injection vulnerability, successful exploitation of this vulnerability may affect service confidentiality and integrity. | Apr 17, 2025 | 9.1 | 26 | NO | NO |
CVE-2026-22419HIGH Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Honor honor allows PHP Local File Inclusion.Th | Mar 5, 2026 | 8.1 | 25 | NO | NO |
CVE-2023-23424CRITICAL
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution
| Dec 29, 2023 | 9.8 | 25 | NO | NO |
CVE-2025-46014HIGH Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive sec | Jun 30, 2025 | 8.8 | 24 | NO | NO |
CVE-2024-47151HIGH Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution | Dec 26, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-51434HIGH
Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.
| Dec 29, 2023 | 7.8 | 21 | NO | NO |
CVE-2023-23431HIGH
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.
| Dec 29, 2023 | 7.1 | 21 | NO | NO |
CVE-2023-51435HIGH
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
| Dec 29, 2023 | 7.1 | 20 | NO | NO |
CVE-2023-51428HIGH
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
| Dec 29, 2023 | 7.1 | 20 | NO | NO |
Signals from CVEs in this vendor scope (47 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Honor Device Co., Ltd..
Media articles that mention a CVE ID that affects a product developed by Honor Device Co., Ltd. — matched by CVE ID, not by vendor name.