# Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [The MPTCP module has the race condition vulnerability.](https://agentprime.io/advisories/CVE-2022-39006.md)
  `CVE-2022-39006` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38993.md)
  `CVE-2022-38993` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38990.md)
  `CVE-2022-38990` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.](https://agentprime.io/advisories/CVE-2022-39000.md)
  `CVE-2022-39000` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Implementation of the WLAN module interfaces has the information disclosure vulnerability.](https://agentprime.io/advisories/CVE-2021-46836.md)
  `CVE-2021-46836` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Implementation of the WLAN module interfaces has the information disclosure vulnerability.](https://agentprime.io/advisories/CVE-2021-40024.md)
  `CVE-2021-40024` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022
- [Deserialization of untrusted data in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39008.md)
  `CVE-2022-39008` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2022 · Tags: Insecure deserialization
- [The My HUAWEI app has a defect in the design.](https://agentprime.io/advisories/CVE-2021-40030.md)
  `CVE-2021-40030` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022
- [Argument injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37005.md)
  `CVE-2022-37005` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Command injection
- [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37003.md)
  `CVE-2022-37003` · CVE record: Huawei HarmonyOS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Broken access control
- [The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).](https://agentprime.io/advisories/CVE-2022-37004.md)
  `CVE-2022-37004` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37002.md)
  `CVE-2022-37002` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.4 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Insufficient verification of data authenticity in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37008.md)
  `CVE-2022-37008` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: CWE-345
- [The chinadrm module has an out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-37007.md)
  `CVE-2022-37007` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022
- [The video framework has the memory overwriting vulnerability caused by addition overflow.](https://agentprime.io/advisories/CVE-2021-40034.md)
  `CVE-2021-40034` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.](https://agentprime.io/advisories/CVE-2021-40016.md)
  `CVE-2021-40016` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.](https://agentprime.io/advisories/CVE-2021-40013.md)
  `CVE-2021-40013` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Vulnerability of pointers being incorrectly used during data transmission in the video framework.](https://agentprime.io/advisories/CVE-2021-40012.md)
  `CVE-2021-40012` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The SystemUI module has a vulnerability in permission control.](https://agentprime.io/advisories/CVE-2022-34738.md)
  `CVE-2022-34738` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The application security module has a vulnerability in permission assignment.](https://agentprime.io/advisories/CVE-2022-34737.md)
  `CVE-2022-34737` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The system module has a read/write vulnerability.](https://agentprime.io/advisories/CVE-2022-34742.md)
  `CVE-2022-34742` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The fingerprint module has a vulnerability of overflow in arithmetic addition.](https://agentprime.io/advisories/CVE-2022-34739.md)
  `CVE-2022-34739` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The NFC module has a buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2022-34741.md)
  `CVE-2022-34741` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The NFC module has a buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2022-34740.md)
  `CVE-2022-34740` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The AT commands of the USB port have an out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-34743.md)
  `CVE-2022-34743` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The frame scheduling module has a null pointer dereference vulnerability.](https://agentprime.io/advisories/CVE-2022-34736.md)
  `CVE-2022-34736` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The frame scheduling module has a null pointer dereference vulnerability.](https://agentprime.io/advisories/CVE-2022-34735.md)
  `CVE-2022-34735` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [The basic framework and setting module have defects, which were introduced during the design.](https://agentprime.io/advisories/CVE-2021-46741.md)
  `CVE-2021-46741` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Missing authorization vulnerability in the system components.](https://agentprime.io/advisories/CVE-2022-31752.md)
  `CVE-2022-31752` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [Configuration defects in the secure OS module.](https://agentprime.io/advisories/CVE-2022-31761.md)
  `CVE-2022-31761` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [Vulnerability of residual files not being deleted after an update in the ChinaDRM module.](https://agentprime.io/advisories/CVE-2021-46813.md)
  `CVE-2021-46813` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [Logical defects in code implementation in some products.](https://agentprime.io/advisories/CVE-2022-31754.md)
  `CVE-2022-31754` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [HwSEServiceAPP has a vulnerability in permission management.](https://agentprime.io/advisories/CVE-2021-46811.md)
  `CVE-2021-46811` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The voice wakeup module has a vulnerability of using externally-controlled format strings.](https://agentprime.io/advisories/CVE-2022-31753.md)
  `CVE-2022-31753` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The setting module has a vulnerability of improper use of APIs.](https://agentprime.io/advisories/CVE-2022-31757.md)
  `CVE-2022-31757` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The Device Manager has a vulnerability in multi-device interaction.](https://agentprime.io/advisories/CVE-2021-46812.md)
  `CVE-2021-46812` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.](https://agentprime.io/advisories/CVE-2022-31760.md)
  `CVE-2022-31760` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The AMS module has a vulnerability in input validation.](https://agentprime.io/advisories/CVE-2022-31762.md)
  `CVE-2022-31762` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [AppLink has a vulnerability of accessing uninitialized pointers.](https://agentprime.io/advisories/CVE-2022-31759.md)
  `CVE-2022-31759` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The communication module has a vulnerability of improper permission preservation.](https://agentprime.io/advisories/CVE-2022-31755.md)
  `CVE-2022-31755` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The fingerprint sensor module has design defects.](https://agentprime.io/advisories/CVE-2022-31756.md)
  `CVE-2022-31756` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The kernel emcom module has multi-thread contention.](https://agentprime.io/advisories/CVE-2022-31751.md)
  `CVE-2022-31751` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The kernel module has the race condition vulnerability.](https://agentprime.io/advisories/CVE-2022-31758.md)
  `CVE-2022-31758` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The kernel module has the null pointer and out-of-bounds array vulnerabilities.](https://agentprime.io/advisories/CVE-2022-31763.md)
  `CVE-2022-31763` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The video framework has an out-of-bounds memory read/write vulnerability.](https://agentprime.io/advisories/CVE-2021-46814.md)
  `CVE-2021-46814` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022
- [The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-29796.md)
  `CVE-2022-29796` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The frame scheduling module has a null pointer dereference vulnerability.](https://agentprime.io/advisories/CVE-2022-29795.md)
  `CVE-2022-29795` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.](https://agentprime.io/advisories/CVE-2022-29794.md)
  `CVE-2022-29794` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-29792.md)
  `CVE-2022-29792` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-29791.md)
  `CVE-2022-29791` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.](https://agentprime.io/advisories/CVE-2022-29790.md)
  `CVE-2022-29790` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-29789.md)
  `CVE-2022-29789` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.](https://agentprime.io/advisories/CVE-2022-22261.md)
  `CVE-2022-22261` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.](https://agentprime.io/advisories/CVE-2022-22260.md)
  `CVE-2022-22260` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorre…](https://agentprime.io/advisories/CVE-2021-46788.md)
  `CVE-2021-46788` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.](https://agentprime.io/advisories/CVE-2021-46787.md)
  `CVE-2021-46787` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.](https://agentprime.io/advisories/CVE-2021-46786.md)
  `CVE-2021-46786` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.](https://agentprime.io/advisories/CVE-2021-46785.md)
  `CVE-2021-46785` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022
- [The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40065.md)
  `CVE-2021-40065` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022
- [The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-46740.md)
  `CVE-2021-46740` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Apr 2022

Newest: <https://agentprime.io/advisories/technology/huawei-emui.md>
Older: <https://agentprime.io/advisories/technology/huawei-emui.md?cursor=WyIyMDIyLTA0LTExVDE5OjM4OjIzLjAwMDAwMFoiLCJDVkUtMjAyMS00Njc0MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-emui&cursor=WyIyMDIyLTA5LTE2VDE3OjU1OjU5LjAwMDAwMFoiLCJDVkUtMjAyMi0zODk4NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-emui/?cursor=WyIyMDIyLTA5LTE2VDE3OjU1OjU5LjAwMDAwMFoiLCJDVkUtMjAyMi0zODk4NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.