Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-44550 CVE record

CVSS 7.5 High

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-44549 CVE record

CVSS 7.5 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44548 CVE record

CVSS 4.3 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44547 CVE record

CVSS 7.5 High

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-44546 CVE record

CVSS 7.5 High

Incomplete cleanup in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-459
Not analysed yet 9 Nov 2022
CVE-2021-46852 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Nov 2022
CVE-2021-46851 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-41603 CVE record

CVSS 3.4 Low

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41602 CVE record

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the finger…
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 14 Oct 2022
CVE-2022-41601 CVE record

CVSS 3.4 Low

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41600 CVE record

CVSS 3.4 Low

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41598 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41597 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41595 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41594 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41593 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41592 CVE record

CVSS 3.4 Low

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41589 CVE record

CVSS 7.5 High

The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-703
Not analysed yet 14 Oct 2022
CVE-2022-41588 CVE record

CVSS 7.5 High

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1264
Not analysed yet 14 Oct 2022
CVE-2022-41586 CVE record

CVSS 7.5 High

The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-130
Not analysed yet 14 Oct 2022
CVE-2022-41585 CVE record

CVSS 7.8 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41584 CVE record

CVSS 7.8 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41583 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41582 CVE record

CVSS 7.5 High

The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-15
Not analysed yet 14 Oct 2022
CVE-2022-41581 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41580 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41578 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41577 CVE record

CVSS 7.1 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-41576 CVE record

CVSS 7.8 High

Code injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Code injection
Not analysed yet 14 Oct 2022
CVE-2022-39011 CVE record

CVSS 7.5 High

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 14 Oct 2022
CVE-2022-38998 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38986 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38985 CVE record

CVSS 7.5 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 14 Oct 2022
CVE-2022-38984 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2022-38983 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2021-46840 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2021-46839 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 14 Oct 2022
CVE-2020-36601 CVE record

Out-of-bounds write vulnerability in the kernel modules.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 16 Sept 2022
CVE-2020-36600 CVE record

Out-of-bounds write vulnerability in the power consumption module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 16 Sept 2022
CVE-2022-39003 CVE record

Buffer overflow vulnerability in the video framework.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 16 Sept 2022
CVE-2021-40019 CVE record

Out-of-bounds heap read vulnerability in the HW_KEYMASTER module.
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2021-40023 CVE record

Configuration defects in the secure OS module.
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39010 CVE record

The HwChrService module has a vulnerability in permission control.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39009 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Sept 2022
CVE-2022-39001 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 16 Sept 2022
CVE-2022-39007 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 16 Sept 2022
CVE-2022-38999 CVE record

The AOD module has the improper update of reference count vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38997 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38996 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38995 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38994 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38992 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38991 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38979 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38978 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38989 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38988 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39005 CVE record

The MPTCP module has the memory leak vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39004 CVE record

The MPTCP module has the memory leak vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38987 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022