Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-39006 CVE record

The MPTCP module has the race condition vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38993 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38990 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39000 CVE record

The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2021-46836 CVE record

Implementation of the WLAN module interfaces has the information disclosure vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2021-40024 CVE record

Implementation of the WLAN module interfaces has the information disclosure vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39008 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 16 Sept 2022
CVE-2021-40030 CVE record

CVSS 7.5 High

The My HUAWEI app has a defect in the design.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2022-37005 CVE record

CVSS 7.5 High

Argument injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Command injection
Not analysed yet 9 Aug 2022
CVE-2022-37003 CVE record

CVSS 6.5 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Aug 2022
CVE-2022-37004 CVE record

CVSS 7.5 High

The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2022-37002 CVE record

CVSS 7.4 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-37008 CVE record

CVSS 7.5 High

Insufficient verification of data authenticity in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-345
Not analysed yet 9 Aug 2022
CVE-2022-37007 CVE record

CVSS 7.5 High

The chinadrm module has an out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2021-40034 CVE record

The video framework has the memory overwriting vulnerability caused by addition overflow.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2021-40016 CVE record

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 11 Jul 2022
CVE-2021-40013 CVE record

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 11 Jul 2022
CVE-2021-40012 CVE record

Vulnerability of pointers being incorrectly used during data transmission in the video framework.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34738 CVE record

The SystemUI module has a vulnerability in permission control.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34737 CVE record

The application security module has a vulnerability in permission assignment.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34742 CVE record

The system module has a read/write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34739 CVE record

The fingerprint module has a vulnerability of overflow in arithmetic addition.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34741 CVE record

The NFC module has a buffer overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34740 CVE record

The NFC module has a buffer overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34743 CVE record

The AT commands of the USB port have an out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34736 CVE record

The frame scheduling module has a null pointer dereference vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34735 CVE record

The frame scheduling module has a null pointer dereference vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2021-46741 CVE record

The basic framework and setting module have defects, which were introduced during the design.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-31752 CVE record

Missing authorization vulnerability in the system components.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2022-31761 CVE record

Configuration defects in the secure OS module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2021-46813 CVE record

Vulnerability of residual files not being deleted after an update in the ChinaDRM module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2022-31754 CVE record

Logical defects in code implementation in some products.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2021-46811 CVE record

HwSEServiceAPP has a vulnerability in permission management.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31753 CVE record

The voice wakeup module has a vulnerability of using externally-controlled format strings.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31757 CVE record

The setting module has a vulnerability of improper use of APIs.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2021-46812 CVE record

The Device Manager has a vulnerability in multi-device interaction.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31760 CVE record

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31762 CVE record

The AMS module has a vulnerability in input validation.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31759 CVE record

AppLink has a vulnerability of accessing uninitialized pointers.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31755 CVE record

The communication module has a vulnerability of improper permission preservation.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31756 CVE record

The fingerprint sensor module has design defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31751 CVE record

The kernel emcom module has multi-thread contention.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31758 CVE record

The kernel module has the race condition vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31763 CVE record

The kernel module has the null pointer and out-of-bounds array vulnerabilities.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2021-46814 CVE record

The video framework has an out-of-bounds memory read/write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-29796 CVE record

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29795 CVE record

The frame scheduling module has a null pointer dereference vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29794 CVE record

The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29792 CVE record

The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29791 CVE record

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29790 CVE record

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-29789 CVE record

The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-22261 CVE record

The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2022-22260 CVE record

The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-46788 CVE record

Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorre…
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 May 2022
CVE-2021-46787 CVE record

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-46786 CVE record

The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-46785 CVE record

The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-40065 CVE record

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2021-46740 CVE record

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022