# Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46891.md)
  `CVE-2021-46891` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: Information disclosure
- [Vulnerability of incomplete read and write permission verification in the GPU module.](https://agentprime.io/advisories/CVE-2021-46890.md)
  `CVE-2021-46890` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34167.md)
  `CVE-2023-34167` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Resource allocation without limits in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34166.md)
  `CVE-2023-34166` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Denial of service
- [Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.](https://agentprime.io/advisories/CVE-2023-34163.md)
  `CVE-2023-34163` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023
- [Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.](https://agentprime.io/advisories/CVE-2023-34162.md)
  `CVE-2023-34162` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023
- [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34161.md)
  `CVE-2023-34161` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Broken access control
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34160.md)
  `CVE-2023-34160` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.](https://agentprime.io/advisories/CVE-2023-34159.md)
  `CVE-2023-34159` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2023
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34158.md)
  `CVE-2023-34158` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Session fixation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34156.md)
  `CVE-2023-34156` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2023-34155.md)
  `CVE-2023-34155` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Buffer overflow in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48501.md)
  `CVE-2022-48501` · CVE record: Huawei EMUI · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption
- [Improper resource shutdown in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48500.md)
  `CVE-2022-48500` · CVE record: Huawei EMUI · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Denial of service
- [Improper resource shutdown in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48499.md)
  `CVE-2022-48499` · CVE record: Huawei EMUI · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Denial of service
- [Resource allocation without limits in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48498.md)
  `CVE-2022-48498` · CVE record: Huawei EMUI · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Denial of service
- [Buffer overflow in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48497.md)
  `CVE-2022-48497` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48496.md)
  `CVE-2022-48496` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained.](https://agentprime.io/advisories/CVE-2022-48495.md)
  `CVE-2022-48495` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48494.md)
  `CVE-2022-48494` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Authentication bypass
- [Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2022-48493.md)
  `CVE-2022-48493` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: CWE-1188
- [Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2022-48492.md)
  `CVE-2022-48492` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: CWE-1188
- [Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.](https://agentprime.io/advisories/CVE-2022-48491.md)
  `CVE-2022-48491` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Buffer overflow in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48490.md)
  `CVE-2022-48490` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption
- [Improper resource shutdown in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48489.md)
  `CVE-2022-48489` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 19 Jun 2023 · Tags: Denial of service
- [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48488.md)
  `CVE-2022-48488` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2023 · Tags: Broken access control
- [Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2022-48487.md)
  `CVE-2022-48487` · CVE record: Huawei EMUI · No CVSS score · Not analysed yet · Published 19 Jun 2023
- [Out-of-bounds write in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48486.md)
  `CVE-2022-48486` · CVE record: Huawei EMUI · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-31227.md)
  `CVE-2023-31227` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Authentication bypass
- [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-31226.md)
  `CVE-2023-31226` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Broken access control
- [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-31225.md)
  `CVE-2023-31225` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.3 Low · Not analysed yet · Published 26 May 2023 · Tags: Race condition
- [The online authentication provided by the hwKitAssistant lacks strict identity verification of applications.](https://agentprime.io/advisories/CVE-2023-0117.md)
  `CVE-2023-0117` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2023
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-0116.md)
  `CVE-2023-0116` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Authentication bypass
- [Integer overflow in Huawei EMUI](https://agentprime.io/advisories/CVE-2022-48480.md)
  `CVE-2022-48480` · CVE record: Huawei EMUI · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Lack of length check vulnerability in the HW_KEYMASTER module.](https://agentprime.io/advisories/CVE-2021-46887.md)
  `CVE-2021-46887` · CVE record: Huawei EMUI · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2023
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46886.md)
  `CVE-2021-46886` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46885.md)
  `CVE-2021-46885` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46884.md)
  `CVE-2021-46884` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46883.md)
  `CVE-2021-46883` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46882.md)
  `CVE-2021-46882` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46881.md)
  `CVE-2021-46881` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Observable discrepancy in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1696.md)
  `CVE-2023-1696` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023 · Tags: Information disclosure
- [The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.](https://agentprime.io/advisories/CVE-2023-1694.md)
  `CVE-2023-1694` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023
- [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1693.md)
  `CVE-2023-1693` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023 · Tags: Broken access control
- [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1692.md)
  `CVE-2023-1692` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2023 · Tags: Broken access control
- [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48314.md)
  `CVE-2022-48314` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2023 · Tags: Authentication bypass
- [Insecure direct object reference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48313.md)
  `CVE-2022-48313` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2023 · Tags: Broken access control
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48312.md)
  `CVE-2022-48312` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2023 · Tags: Memory corruption
- [The SystemUI module has a vulnerability of repeated app restart due to improper parameters.](https://agentprime.io/advisories/CVE-2023-26549.md)
  `CVE-2023-26549` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-233
- [The pgmng module has a vulnerability in serialization/deserialization.](https://agentprime.io/advisories/CVE-2023-26548.md)
  `CVE-2023-26548` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The InputMethod module has a vulnerability of serialization/deserialization mismatch.](https://agentprime.io/advisories/CVE-2023-26547.md)
  `CVE-2023-26547` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The Always On Display (AOD) has a path traversal vulnerability in theme files.](https://agentprime.io/advisories/CVE-2022-48361.md)
  `CVE-2022-48361` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The facial recognition module has a vulnerability in file permission control.](https://agentprime.io/advisories/CVE-2022-48360.md)
  `CVE-2022-48360` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Mass assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48359.md)
  `CVE-2022-48359` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: Broken access control
- [The BatteryHealthActivity has a redirection vulnerability.](https://agentprime.io/advisories/CVE-2022-48358.md)
  `CVE-2022-48358` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Resource allocation without limits in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48357.md)
  `CVE-2022-48357` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: Denial of service
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48356.md)
  `CVE-2022-48356` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-20
- [The Bluetooth module has a heap out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-48355.md)
  `CVE-2022-48355` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [The Bluetooth module has a heap out-of-bounds write vulnerability.](https://agentprime.io/advisories/CVE-2022-48354.md)
  `CVE-2022-48354` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 27 Mar 2023
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48353.md)
  `CVE-2022-48353` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2023 · Tags: Privilege escalation

Newest: <https://agentprime.io/advisories/technology/huawei-emui.md>
Older: <https://agentprime.io/advisories/technology/huawei-emui.md?cursor=WyIyMDIzLTAzLTI3VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00ODM1MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-emui&cursor=WyIyMDIzLTA3LTA1VDEyOjE3OjE5LjUxNDAwMFoiLCJDVkUtMjAyMS00Njg5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-emui/?cursor=WyIyMDIzLTA3LTA1VDEyOjE3OjE5LjUxNDAwMFoiLCJDVkUtMjAyMS00Njg5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.