Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-46891 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 5 Jul 2023
CVE-2021-46890 CVE record

Vulnerability of incomplete read and write permission verification in the GPU module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 5 Jul 2023
CVE-2023-34167 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34166 CVE record

CVSS 7.5 High

Resource allocation without limits in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 19 Jun 2023
CVE-2023-34163 CVE record

CVSS 7.5 High

Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2023-34162 CVE record

CVSS 7.5 High

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2023-34161 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 19 Jun 2023
CVE-2023-34160 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34159 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2023-34158 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34156 CVE record

Session fixation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2023-34155 CVE record

Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48501 CVE record

CVSS 7.5 High

Buffer overflow in Huawei EMUI
- Huawei EMUI
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2022-48500 CVE record

CVSS 7.5 High

Improper resource shutdown in Huawei EMUI
- Huawei EMUI
- Denial of service
Not analysed yet 19 Jun 2023
CVE-2022-48499 CVE record

CVSS 7.5 High

Improper resource shutdown in Huawei EMUI
- Huawei EMUI
- Denial of service
Not analysed yet 19 Jun 2023
CVE-2022-48498 CVE record

CVSS 7.5 High

Resource allocation without limits in Huawei EMUI
- Huawei EMUI
- Denial of service
Not analysed yet 19 Jun 2023
CVE-2022-48497 CVE record

Buffer overflow in Huawei EMUI
- Huawei EMUI
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2022-48496 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2022-48495 CVE record

Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48494 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 19 Jun 2023
CVE-2022-48493 CVE record

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
- Huawei EMUI
- CWE-1188
Not analysed yet 19 Jun 2023
CVE-2022-48492 CVE record

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
- Huawei EMUI
- CWE-1188
Not analysed yet 19 Jun 2023
CVE-2022-48491 CVE record

Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48490 CVE record

Buffer overflow in Huawei EMUI
- Huawei EMUI
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2022-48489 CVE record

Improper resource shutdown in Huawei EMUI
- Huawei EMUI
- Denial of service
Not analysed yet 19 Jun 2023
CVE-2022-48488 CVE record

CVSS 5.3 Medium

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 19 Jun 2023
CVE-2022-48487 CVE record

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
- Huawei EMUI
Not analysed yet 19 Jun 2023
CVE-2022-48486 CVE record

CVSS 7.5 High

Out-of-bounds write in Huawei EMUI
- Huawei EMUI
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2023-31227 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 26 May 2023
CVE-2023-31226 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 26 May 2023
CVE-2023-31225 CVE record

CVSS 3.3 Low

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 26 May 2023
CVE-2023-0117 CVE record

CVSS 5.3 Medium

The online authentication provided by the hwKitAssistant lacks strict identity verification of applications.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 26 May 2023
CVE-2023-0116 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 26 May 2023
CVE-2022-48480 CVE record

CVSS 7.5 High

Integer overflow in Huawei EMUI
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2021-46887 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Lack of length check vulnerability in the HW_KEYMASTER module.
- Huawei EMUI
Not analysed yet 26 May 2023
CVE-2021-46886 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2021-46885 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2021-46884 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2021-46883 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2021-46882 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2021-46881 CVE record

CVSS 7.5 High

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 26 May 2023
CVE-2023-1696 CVE record

CVSS 7.5 High

Observable discrepancy in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 20 May 2023
CVE-2023-1694 CVE record

CVSS 7.5 High

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 May 2023
CVE-2023-1693 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 20 May 2023
CVE-2023-1692 CVE record

CVSS 7.5 High

Incorrect permission assignment in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 20 May 2023
CVE-2022-48314 CVE record

CVSS 6.5 Medium

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Apr 2023
CVE-2022-48313 CVE record

CVSS 6.5 Medium

Insecure direct object reference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 16 Apr 2023
CVE-2022-48312 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 16 Apr 2023
CVE-2023-26549 CVE record

The SystemUI module has a vulnerability of repeated app restart due to improper parameters.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-233
Not analysed yet 27 Mar 2023
CVE-2023-26548 CVE record

The pgmng module has a vulnerability in serialization/deserialization.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2023-26547 CVE record

The InputMethod module has a vulnerability of serialization/deserialization mismatch.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48361 CVE record

The Always On Display (AOD) has a path traversal vulnerability in theme files.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48360 CVE record

The facial recognition module has a vulnerability in file permission control.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48359 CVE record

Mass assignment in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 27 Mar 2023
CVE-2022-48358 CVE record

The BatteryHealthActivity has a redirection vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48357 CVE record

Resource allocation without limits in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 27 Mar 2023
CVE-2022-48356 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 27 Mar 2023
CVE-2022-48355 CVE record

The Bluetooth module has a heap out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48354 CVE record

The Bluetooth module has a heap out-of-bounds write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48353 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 27 Mar 2023