# Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Vulnerability of defects introduced in the design process in the HiviewTunner module.](https://agentprime.io/advisories/CVE-2023-41297.md)
  `CVE-2023-41297` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023
- [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-41296.md)
  `CVE-2023-41296` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Broken access control
- [Vulnerability of improper permission management in the displayengine module.](https://agentprime.io/advisories/CVE-2023-41295.md)
  `CVE-2023-41295` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39409.md)
  `CVE-2023-39409` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39408.md)
  `CVE-2023-39408` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Vulnerability of defects introduced in the design process in the Multi-Device Task Center.](https://agentprime.io/advisories/CVE-2021-46895.md)
  `CVE-2021-46895` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-701
- [Permission control vulnerability in the XLayout component.](https://agentprime.io/advisories/CVE-2023-39406.md)
  `CVE-2023-39406` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39404.md)
  `CVE-2023-39404` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39403.md)
  `CVE-2023-39403` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-358
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39402.md)
  `CVE-2023-39402` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Path traversal, Broken access control
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39401.md)
  `CVE-2023-39401` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Path traversal, Broken access control
- [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39400.md)
  `CVE-2023-39400` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Path traversal, Broken access control
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39399.md)
  `CVE-2023-39399` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-275
- [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39398.md)
  `CVE-2023-39398` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2023 · Tags: Broken access control, CWE-275
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39397.md)
  `CVE-2023-39397` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption
- [Mismatch vulnerability in the serialization process in the communication system.](https://agentprime.io/advisories/CVE-2023-39395.md)
  `CVE-2023-39395` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-19
- [Vulnerability of API privilege escalation in the wifienhance module.](https://agentprime.io/advisories/CVE-2023-39394.md)
  `CVE-2023-39394` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Vulnerability of system file information leakage in the USB Service module.](https://agentprime.io/advisories/CVE-2023-39391.md)
  `CVE-2023-39391` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39390.md)
  `CVE-2023-39390` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20, CWE-116
- [Vulnerability of permission control in the window management module.](https://agentprime.io/advisories/CVE-2023-39387.md)
  `CVE-2023-39387` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39386.md)
  `CVE-2023-39386` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption, CWE-116
- [Vulnerability of configuration defects in the media module of certain products..](https://agentprime.io/advisories/CVE-2023-39385.md)
  `CVE-2023-39385` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-16
- [Vulnerability of incomplete permission verification in the input method module.](https://agentprime.io/advisories/CVE-2023-39384.md)
  `CVE-2023-39384` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-264
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39383.md)
  `CVE-2023-39383` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Information disclosure
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39382.md)
  `CVE-2023-39382` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20, CWE-116
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39381.md)
  `CVE-2023-39381` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20, CWE-116
- [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39380.md)
  `CVE-2023-39380` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Authentication bypass, CWE-264
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39405.md)
  `CVE-2023-39405` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-20
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39396.md)
  `CVE-2023-39396` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39393.md)
  `CVE-2023-39393` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Information disclosure
- [Vulnerability of insecure signatures in the OsuLogin module.](https://agentprime.io/advisories/CVE-2023-39392.md)
  `CVE-2023-39392` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-16
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39389.md)
  `CVE-2023-39389` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption, CWE-1285
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-39388.md)
  `CVE-2023-39388` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: Memory corruption, CWE-1285
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48520.md)
  `CVE-2022-48520` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48519.md)
  `CVE-2022-48519` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent.](https://agentprime.io/advisories/CVE-2022-48518.md)
  `CVE-2022-48518` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-701
- [Improper handling of exceptional conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-1695.md)
  `CVE-2023-1695` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-755
- [Vulnerability of failures to capture exceptions in the communication framework.](https://agentprime.io/advisories/CVE-2023-1691.md)
  `CVE-2023-1691` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-248
- [Unauthorized service access vulnerability in the DSoftBus module.](https://agentprime.io/advisories/CVE-2022-48517.md)
  `CVE-2022-48517` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-701
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48516.md)
  `CVE-2022-48516` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48515.md)
  `CVE-2022-48515` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Privilege escalation
- [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48513.md)
  `CVE-2022-48513` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Authentication bypass
- [Encryption bypass vulnerability in Maintenance mode.](https://agentprime.io/advisories/CVE-2021-46892.md)
  `CVE-2021-46892` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-701
- [Type confusion in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48511.md)
  `CVE-2022-48511` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48510.md)
  `CVE-2022-48510` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48509.md)
  `CVE-2022-48509` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Authentication bypass by replay in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48507.md)
  `CVE-2022-48507` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Authentication bypass
- [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-34164.md)
  `CVE-2023-34164` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-3456.md)
  `CVE-2023-3456` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-20
- [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37245.md)
  `CVE-2023-37245` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Insecure direct object reference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37242.md)
  `CVE-2023-37242` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Broken access control
- [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37241.md)
  `CVE-2023-37241` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-20
- [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37240.md)
  `CVE-2023-37240` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-37239.md)
  `CVE-2023-37239` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Information disclosure
- [Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.](https://agentprime.io/advisories/CVE-2023-37238.md)
  `CVE-2023-37238` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-275
- [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2021-46894.md)
  `CVE-2021-46894` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Privilege escalation
- [Heap-based buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48512.md)
  `CVE-2022-48512` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: Memory corruption
- [Inappropriate authorization vulnerability in the system apps.](https://agentprime.io/advisories/CVE-2022-48508.md)
  `CVE-2022-48508` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-264
- [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-3455.md)
  `CVE-2023-3455` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: Information disclosure
- [Vulnerability of unstrict data verification and parameter check.](https://agentprime.io/advisories/CVE-2021-46893.md)
  `CVE-2021-46893` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: CWE-1284

Newest: <https://agentprime.io/advisories/technology/huawei-emui.md>
Older: <https://agentprime.io/advisories/technology/huawei-emui.md?cursor=WyIyMDIzLTA3LTA1VDEyOjE3OjE5LjUxNDAwMFoiLCJDVkUtMjAyMS00Njg5MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=huawei-emui&cursor=WyIyMDIzLTA5LTI1VDExOjQwOjMyLjMxMzAwMFoiLCJDVkUtMjAyMy00MTI5OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/huawei-emui/?cursor=WyIyMDIzLTA5LTI1VDExOjQwOjMyLjMxMzAwMFoiLCJDVkUtMjAyMy00MTI5OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.