Advisories · Technology

Huawei EMUI.

Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-48352 CVE record

CVSS 7.5 High

Some smartphones have data initialization issues.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-665
Not analysed yet 27 Mar 2023
CVE-2022-48351 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 27 Mar 2023
CVE-2022-48350 CVE record

CVSS 7.5 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 27 Mar 2023
CVE-2022-48349 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 27 Mar 2023
CVE-2022-48348 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 27 Mar 2023
CVE-2022-48347 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 27 Mar 2023
CVE-2022-48346 CVE record

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 27 Mar 2023
CVE-2022-48291 CVE record

The Bluetooth module has an authentication bypass vulnerability in the pairing process.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 27 Mar 2023
CVE-2022-48302 CVE record

CVSS 7.5 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2022-48301 CVE record

CVSS 7.5 High

The bundle management module lacks permission verification in some APIs.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-281
Not analysed yet 9 Feb 2023
CVE-2022-48300 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2022-48299 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2022-48298 CVE record

CVSS 7.5 High

The geofencing kernel code does not verify the length of the input data.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1284
Not analysed yet 9 Feb 2023
CVE-2022-48297 CVE record

CVSS 7.5 High

The geofencing kernel code has a vulnerability of not verifying the length of the input data.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-1284
Not analysed yet 9 Feb 2023
CVE-2022-48296 CVE record

CVSS 5.3 Medium

The SystemUI has a vulnerability in permission management.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-281
Not analysed yet 9 Feb 2023
CVE-2022-48295 CVE record

CVSS 7.5 High

The IHwAntiMalPlugin interface lacks permission verification.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-281
Not analysed yet 9 Feb 2023
CVE-2022-48294 CVE record

CVSS 7.5 High

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2022-48293 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 9 Feb 2023
CVE-2022-48292 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 9 Feb 2023
CVE-2022-48289 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2022-48288 CVE record

CVSS 7.5 High

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2022-48287 CVE record

CVSS 7.5 High

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 9 Feb 2023
CVE-2022-48286 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 9 Feb 2023
CVE-2022-47976 CVE record

CVSS 7.5 High

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 6 Jan 2023
CVE-2022-47975 CVE record

CVSS 7.5 High

Double free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jan 2023
CVE-2022-47974 CVE record

CVSS 6.5 Medium

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 6 Jan 2023
CVE-2022-46762 CVE record

CVSS 7.5 High

Protection mechanism failure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-693
Not analysed yet 6 Jan 2023
CVE-2022-46761 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Jan 2023
CVE-2021-46868 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jan 2023
CVE-2021-46867 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 6 Jan 2023
CVE-2022-46328 CVE record

CVSS 7.5 High

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 20 Dec 2022
CVE-2022-46327 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 20 Dec 2022
CVE-2022-46326 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46325 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46324 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46323 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46322 CVE record

CVSS 7.5 High

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46321 CVE record

CVSS 7.5 High

The Wi-Fi module has a vulnerability in permission verification.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 Dec 2022
CVE-2022-46320 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46319 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46318 CVE record

CVSS 5.3 Medium

The HAware module has a function logic error.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 Dec 2022
CVE-2022-46317 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 20 Dec 2022
CVE-2022-46315 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 20 Dec 2022
CVE-2022-46312 CVE record

Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 20 Dec 2022
CVE-2022-41599 CVE record

CVSS 7.5 High

The system service has a vulnerability that causes incorrect return values.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 20 Dec 2022
CVE-2022-41596 CVE record

CVSS 7.5 High

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 20 Dec 2022
CVE-2022-41591 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 20 Dec 2022
CVE-2021-46856 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 20 Dec 2022
CVE-2022-44563 CVE record

CVSS 5.9 Medium

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 9 Nov 2022
CVE-2022-44562 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 9 Nov 2022
CVE-2022-44561 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44560 CVE record

CVSS 5.3 Medium

Open redirect in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Open redirect
Not analysed yet 9 Nov 2022
CVE-2022-44559 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 9 Nov 2022
CVE-2022-44558 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Insecure deserialization
Not analysed yet 9 Nov 2022
CVE-2022-44557 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44555 CVE record

CVSS 7.5 High

Authentication bypass by replay in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 9 Nov 2022
CVE-2022-44554 CVE record

CVSS 7.5 High

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-44553 CVE record

CVSS 5.3 Medium

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 9 Nov 2022
CVE-2022-44552 CVE record

CVSS 7.5 High

Improper resource shutdown in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 9 Nov 2022
CVE-2022-44551 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 9 Nov 2022