Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-30415 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 7 Apr 2024
CVE-2024-30414 CVE record

CVSS 7.5 High

OS command injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Command injection
Not analysed yet 7 Apr 2024
CVE-2024-30413 CVE record

CVSS 7.5 High

Incorrect permission assignment in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 7 Apr 2024
CVE-2022-48621 CVE record

CVSS 6.3 Medium

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 18 Feb 2024
CVE-2023-52381 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Code injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Code injection
Not analysed yet 18 Feb 2024
CVE-2023-52380 CVE record

CVSS 4.3 Medium

Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 18 Feb 2024
CVE-2023-52379 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 18 Feb 2024
CVE-2023-52378 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 18 Feb 2024
CVE-2023-52377 CVE record

CVSS 7.4 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-52376 CVE record

CVSS 7.5 High

Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-212
Not analysed yet 18 Feb 2024
CVE-2023-52375 CVE record

CVSS 5.5 Medium

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 18 Feb 2024
CVE-2023-52374 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 18 Feb 2024
CVE-2023-52373 CVE record

CVSS 7.5 High

Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-281
Not analysed yet 18 Feb 2024
CVE-2023-52372 CVE record

CVSS 7.5 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 18 Feb 2024
CVE-2023-52371 CVE record

CVSS 3.5 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-52370 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-52369 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-52368 CVE record

CVSS 5.3 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 18 Feb 2024
CVE-2023-52367 CVE record

CVSS 7.7 High

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 18 Feb 2024
CVE-2023-52366 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-52365 CVE record

CVSS 7.7 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-52363 CVE record

CVSS 6.3 Medium

Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 18 Feb 2024
CVE-2023-52362 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 18 Feb 2024
CVE-2023-52360 CVE record

CVSS 7.5 High

Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-511
Not analysed yet 18 Feb 2024
CVE-2023-52358 CVE record

CVSS 6.2 Medium

Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 18 Feb 2024
CVE-2023-52357 CVE record

CVSS 6.2 Medium

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 18 Feb 2024
CVE-2023-52097 CVE record

CVSS 7.5 High

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 18 Feb 2024
CVE-2023-52387 CVE record

CVSS 7.5 High

Resource reuse vulnerability in the GPU module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-664
Not analysed yet 18 Feb 2024
CVE-2023-52106 CVE record

CVSS 4.4 Medium

Vulnerability of permission verification for APIs in the DownloadProviderMain module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 16 Jan 2024
CVE-2023-52104 CVE record

CVSS 7.5 High

Vulnerability of parameters being not verified in the WMS module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Jan 2024
CVE-2023-52103 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 16 Jan 2024
CVE-2023-52102 CVE record

CVSS 7.5 High

Improper output encoding in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-116
Not analysed yet 16 Jan 2024
CVE-2023-52101 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 16 Jan 2024
CVE-2023-52099 CVE record

CVSS 7.5 High

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 16 Jan 2024
CVE-2023-52098 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
- CWE-116
Not analysed yet 16 Jan 2024
CVE-2023-52108 CVE record

CVSS 7.5 High

Vulnerability of process priorities being raised in the ActivityManagerService module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Jan 2024
CVE-2023-52107 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 16 Jan 2024
CVE-2023-52116 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 16 Jan 2024
CVE-2023-52114 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
- Broken access control
Not analysed yet 16 Jan 2024
CVE-2023-44112 CVE record

CVSS 7.5 High

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 16 Jan 2024
CVE-2023-52113 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 16 Jan 2024
CVE-2023-52112 CVE record

CVSS 5.3 Medium

Files accessible to external parties in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 16 Jan 2024
CVE-2023-52111 CVE record

CVSS 7.5 High

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Jan 2024
CVE-2023-52109 CVE record

CVSS 7.5 High

Insufficient verification of data authenticity in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-345
Not analysed yet 16 Jan 2024
CVE-2023-44117 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Jan 2024
CVE-2023-4566 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Jan 2024
CVE-2023-6273 CVE record

CVSS 5.3 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Dec 2023
CVE-2023-49240 CVE record

Open redirect in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Open redirect
Not analysed yet 6 Dec 2023
CVE-2023-49239 CVE record

Unauthorized access vulnerability in the card management module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49246 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Dec 2023
CVE-2023-49245 CVE record

Unauthorized access vulnerability in the Huawei Share module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49244 CVE record

Permission management vulnerability in the multi-user module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49243 CVE record

Vulnerability of unauthorized access to email attachments in the email module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49242 CVE record

Free broadcast vulnerability in the running management module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49241 CVE record

API permission control vulnerability in the network management module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-44113 CVE record

CVSS 7.5 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Dec 2023
CVE-2023-44099 CVE record

Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
Not analysed yet 6 Dec 2023
CVE-2023-49248 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Dec 2023
CVE-2023-49247 CVE record

Improper certificate validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Weak cryptography or TLS
Not analysed yet 6 Dec 2023
CVE-2023-46773 CVE record

Permission management vulnerability in the PMS module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023