Vendor
vivo
26 known vulnerabilities.
vivo at a glance
- Last 12 months
- 8
- Critical · all time
- 1
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 1 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 2 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 2 | 1 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 2 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 2 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 3 | 0 |
| Dec 2024 | 6 | 0 |
Products
26 results · Feed
-
Medium 5.1
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…
-
Low 2.4
A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly w…
-
Low 2.4
A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps o…
-
Medium 5.3
The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.
-
Critical 9.4
An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unau…
-
Medium 6.9
The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific condi…
-
Medium 5.1
Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.
-
High 7.1
The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 5.1
The wallet has an authentication bypass vulnerability that allows access to specific pages.
-
Medium 4.8
SystemUI component protection settings vulnerability
SystemUI has an incorrect component protection setting, which allows access to specific information.
-
Medium 6.3
MinigameCenter information leakage vulnerability
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 6.3
MinigameCenter module information leakage vulnerability
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 6.3
Health information leakage vulnerability
The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 5.5
Information disclosure vulnerability in Alarm clock module
Some parameters of the alarm clock module are improperly stored, leaking some sensitive information.
-
High 7.9
Permission bypass vulnerability in permission manager module
Locally installed application can bypass the permission check and perform system operations that require permission.
-
Medium 5.9
Information disclosure vulnerability in Weather module
Some parameters of the weather module are improperly stored, leaking some sensitive information.
-
Medium 6.3
Sensitive information leakage vulnerability in wifi module
The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.
-
High 7.0
Command Execution Vulnerability in ABE service
Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.
-
Medium 6.4
When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pr…
-
Low 2.4
Game Extension Engine Path Traversal Vulnerability
The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files
-
Low 1.0
Wifi information acquisition vulnerability in Framework Services
Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.
-
Medium 4.8
Framework Information Disclosure Vulnerability
Improper control of framework service permissions with possibility of some sensitive device information leakage.
-
Medium 5.6
Security Advisory | PendingIntent hijacking vulnerability in Framework Services
The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.
-
Medium 5.5
Broken Access Control Vulnerability in Jovi Smart Scene
The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.
-
High 8.2
AppStore Remote Download and Installation Vulnerability
The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters.
-
Medium 5.5
The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which …