# Huawei EMUI. Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.](https://agentprime.io/advisories/CVE-2022-22253.md) `CVE-2022-22253` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.](https://agentprime.io/advisories/CVE-2021-46742.md) `CVE-2021-46742` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-22254.md) `CVE-2022-22254` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.](https://agentprime.io/advisories/CVE-2022-22255.md) `CVE-2022-22255` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-22256.md) `CVE-2022-22256` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.](https://agentprime.io/advisories/CVE-2022-22257.md) `CVE-2022-22257` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [There is a vulnerability of memory not being released after effective lifetime in the Bastet module.](https://agentprime.io/advisories/CVE-2021-40047.md) `CVE-2021-40047` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an incorrect buffer size calculation vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2021-40048.md) `CVE-2021-40048` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a permission control vulnerability in the PMS module.](https://agentprime.io/advisories/CVE-2021-40049.md) `CVE-2021-40049` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an out-of-bounds read vulnerability in the IFAA module.](https://agentprime.io/advisories/CVE-2021-40050.md) `CVE-2021-40050` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an unauthorized access vulnerability in system components.](https://agentprime.io/advisories/CVE-2021-40051.md) `CVE-2021-40051` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2021-40052.md) `CVE-2021-40052` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an integer underflow vulnerability in the atcmdserver module.](https://agentprime.io/advisories/CVE-2021-40054.md) `CVE-2021-40054` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a man-in-the-middle attack vulnerability during system update download in recovery mode.](https://agentprime.io/advisories/CVE-2021-40055.md) `CVE-2021-40055` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a vulnerability of copying input buffer without checking its size in the video framework.](https://agentprime.io/advisories/CVE-2021-40056.md) `CVE-2021-40056` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a heap-based and stack-based buffer overflow vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2021-40057.md) `CVE-2021-40057` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a heap-based buffer overflow vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2021-40058.md) `CVE-2021-40058` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a permission control vulnerability in the Wi-Fi module.](https://agentprime.io/advisories/CVE-2021-40059.md) `CVE-2021-40059` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a heap-based buffer overflow vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2021-40060.md) `CVE-2021-40060` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module.](https://agentprime.io/advisories/CVE-2021-40061.md) `CVE-2021-40061` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a vulnerability of copying input buffer without checking its size in the video framework.](https://agentprime.io/advisories/CVE-2021-40062.md) `CVE-2021-40062` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an improper access control vulnerability in the video module.](https://agentprime.io/advisories/CVE-2021-40063.md) `CVE-2021-40063` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a heap-based buffer overflow vulnerability in system components.](https://agentprime.io/advisories/CVE-2021-40064.md) `CVE-2021-40064` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an improper permission management vulnerability in the Wallet apps.](https://agentprime.io/advisories/CVE-2021-37103.md) `CVE-2021-37103` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds in smartphones.](https://agentprime.io/advisories/CVE-2021-22429.md) `CVE-2021-22429` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a vulnerability when configuring permission isolation in smartphones.](https://agentprime.io/advisories/CVE-2021-22432.md) `CVE-2021-22432` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a logic bypass vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22430.md) `CVE-2021-22430` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds in smartphones.](https://agentprime.io/advisories/CVE-2021-22426.md) `CVE-2021-22426` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a vulnerability when configuring permission isolation in smartphones.](https://agentprime.io/advisories/CVE-2021-22431.md) `CVE-2021-22431` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds in smartphones.](https://agentprime.io/advisories/CVE-2021-22433.md) `CVE-2021-22433` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a memory address out of bounds vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22434.md) `CVE-2021-22434` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a code injection vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22395.md) `CVE-2021-22395` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a buffer overflow vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22394.md) `CVE-2021-22394` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is an improper verification vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22319.md) `CVE-2021-22319` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a DoS vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-37027.md) `CVE-2021-37027` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a DoS vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22489.md) `CVE-2021-22489` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is an improper verification vulnerability in smartphones.](https://agentprime.io/advisories/CVE-2021-22448.md) `CVE-2021-22448` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a software integer overflow leading to a TOCTOU condition in smartphones.](https://agentprime.io/advisories/CVE-2021-22437.md) `CVE-2021-22437` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 25 Feb 2022 - [There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.](https://agentprime.io/advisories/CVE-2021-40015.md) `CVE-2021-40015` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations.](https://agentprime.io/advisories/CVE-2021-40044.md) `CVE-2021-40044` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-40045.md) `CVE-2021-40045` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access.](https://agentprime.io/advisories/CVE-2021-39997.md) `CVE-2021-39997` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.](https://agentprime.io/advisories/CVE-2021-39994.md) `CVE-2021-39994` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.](https://agentprime.io/advisories/CVE-2021-39992.md) `CVE-2021-39992` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access.](https://agentprime.io/advisories/CVE-2021-37107.md) `CVE-2021-37107` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure.](https://agentprime.io/advisories/CVE-2021-37109.md) `CVE-2021-37109` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-37115.md) `CVE-2021-37115` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-39986.md) `CVE-2021-39986` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2021-39991.md) `CVE-2021-39991` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 9 Feb 2022 - [The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40032.md) `CVE-2021-40032` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-40027.md) `CVE-2021-40027` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 · Tags: Memory corruption - [The bone voice ID trusted application (TA) has a heap overflow vulnerability.](https://agentprime.io/advisories/CVE-2021-40014.md) `CVE-2021-40014` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Null pointer dereference vulnerability in the camera module in smartphones.](https://agentprime.io/advisories/CVE-2021-40039.md) `CVE-2021-40039` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Double free vulnerability in the AOD module in smartphones.](https://agentprime.io/advisories/CVE-2021-40038.md) `CVE-2021-40038` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones.](https://agentprime.io/advisories/CVE-2021-40037.md) `CVE-2021-40037` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.](https://agentprime.io/advisories/CVE-2021-40035.md) `CVE-2021-40035` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Null pointer dereference vulnerability in the camera module in smartphones.](https://agentprime.io/advisories/CVE-2021-40031.md) `CVE-2021-40031` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.](https://agentprime.io/advisories/CVE-2021-40029.md) `CVE-2021-40029` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones.](https://agentprime.io/advisories/CVE-2021-40026.md) `CVE-2021-40026` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 - [There is an Out-of-bounds write vulnerability in the AOD module in smartphones.](https://agentprime.io/advisories/CVE-2021-40009.md) `CVE-2021-40009` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2022 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .