Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-41297 CVE record

Vulnerability of defects introduced in the design process in the HiviewTunner module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 25 Sept 2023
CVE-2023-41296 CVE record

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 25 Sept 2023
CVE-2023-41295 CVE record

Vulnerability of improper permission management in the displayengine module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 25 Sept 2023
CVE-2023-39409 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 25 Sept 2023
CVE-2023-39408 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 25 Sept 2023
CVE-2021-46895 CVE record

Vulnerability of defects introduced in the design process in the Multi-Device Task Center.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 13 Aug 2023
CVE-2023-39406 CVE record

Permission control vulnerability in the XLayout component.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39404 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 13 Aug 2023
CVE-2023-39403 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-358
Not analysed yet 13 Aug 2023
CVE-2023-39402 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
- Broken access control
Not analysed yet 13 Aug 2023
CVE-2023-39401 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
- Broken access control
Not analysed yet 13 Aug 2023
CVE-2023-39400 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
- Broken access control
Not analysed yet 13 Aug 2023
CVE-2023-39399 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-275
Not analysed yet 13 Aug 2023
CVE-2023-39398 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-275
Not analysed yet 13 Aug 2023
CVE-2023-39397 CVE record

CVSS 7.5 High

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 13 Aug 2023
CVE-2023-39395 CVE record

CVSS 7.5 High

Mismatch vulnerability in the serialization process in the communication system.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-19
Not analysed yet 13 Aug 2023
CVE-2023-39394 CVE record

Vulnerability of API privilege escalation in the wifienhance module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39391 CVE record

Vulnerability of system file information leakage in the USB Service module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39390 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39387 CVE record

Vulnerability of permission control in the window management module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39386 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39385 CVE record

Vulnerability of configuration defects in the media module of certain products..
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 13 Aug 2023
CVE-2023-39384 CVE record

Vulnerability of incomplete permission verification in the input method module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39383 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 13 Aug 2023
CVE-2023-39382 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39381 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
- CWE-116
Not analysed yet 13 Aug 2023
CVE-2023-39380 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
- CWE-264
Not analysed yet 13 Aug 2023
CVE-2023-39405 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 13 Aug 2023
CVE-2023-39396 CVE record

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 13 Aug 2023
CVE-2023-39393 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 13 Aug 2023
CVE-2023-39392 CVE record

Vulnerability of insecure signatures in the OsuLogin module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-16
Not analysed yet 13 Aug 2023
CVE-2023-39389 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CWE-1285
Not analysed yet 13 Aug 2023
CVE-2023-39388 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
- CWE-1285
Not analysed yet 13 Aug 2023
CVE-2022-48520 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48519 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48518 CVE record

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 6 Jul 2023
CVE-2023-1695 CVE record

Improper handling of exceptional conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-755
Not analysed yet 6 Jul 2023
CVE-2023-1691 CVE record

Vulnerability of failures to capture exceptions in the communication framework.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-248
Not analysed yet 6 Jul 2023
CVE-2022-48517 CVE record

Unauthorized service access vulnerability in the DSoftBus module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 6 Jul 2023
CVE-2022-48516 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48515 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 6 Jul 2023
CVE-2022-48513 CVE record

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 6 Jul 2023
CVE-2021-46892 CVE record

Encryption bypass vulnerability in Maintenance mode.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-701
Not analysed yet 6 Jul 2023
CVE-2022-48511 CVE record

Type confusion in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2022-48510 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2022-48509 CVE record

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2022-48507 CVE record

Authentication bypass by replay in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 6 Jul 2023
CVE-2023-34164 CVE record

NULL pointer dereference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2023-3456 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Jul 2023
CVE-2023-37245 CVE record

Buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2023-37242 CVE record

Insecure direct object reference in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Jul 2023
CVE-2023-37241 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Jul 2023
CVE-2023-37240 CVE record

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2023-37239 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 6 Jul 2023
CVE-2023-37238 CVE record

Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-275
Not analysed yet 6 Jul 2023
CVE-2021-46894 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 6 Jul 2023
CVE-2022-48512 CVE record

Heap-based buffer overflow in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jul 2023
CVE-2022-48508 CVE record

Inappropriate authorization vulnerability in the system apps.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 6 Jul 2023
CVE-2023-3455 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 5 Jul 2023
CVE-2021-46893 CVE record

Vulnerability of unstrict data verification and parameter check.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1284
Not analysed yet 5 Jul 2023