# Huawei Magic UI. Every CVE that names Huawei Magic UI among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Out-of-bounds write vulnerability in the kernel modules.](https://agentprime.io/advisories/CVE-2020-36601.md) `CVE-2020-36601` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [Out-of-bounds write vulnerability in the power consumption module.](https://agentprime.io/advisories/CVE-2020-36600.md) `CVE-2020-36600` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [Buffer overflow vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2022-39003.md) `CVE-2022-39003` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-39001.md) `CVE-2022-39001` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2022 · Tags: Path traversal - [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38997.md) `CVE-2022-38997` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38979.md) `CVE-2022-38979` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The secure OS module has configuration defects.](https://agentprime.io/advisories/CVE-2022-38978.md) `CVE-2022-38978` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The MPTCP module has the memory leak vulnerability.](https://agentprime.io/advisories/CVE-2022-39005.md) `CVE-2022-39005` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The MPTCP module has the memory leak vulnerability.](https://agentprime.io/advisories/CVE-2022-39004.md) `CVE-2022-39004` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The MPTCP module has the race condition vulnerability.](https://agentprime.io/advisories/CVE-2022-39006.md) `CVE-2022-39006` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.](https://agentprime.io/advisories/CVE-2022-39000.md) `CVE-2022-39000` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 16 Sept 2022 - [The My HUAWEI app has a defect in the design.](https://agentprime.io/advisories/CVE-2021-40030.md) `CVE-2021-40030` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 - [Argument injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37005.md) `CVE-2022-37005` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Command injection - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37003.md) `CVE-2022-37003` · CVE record: Huawei HarmonyOS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Broken access control - [The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).](https://agentprime.io/advisories/CVE-2022-37004.md) `CVE-2022-37004` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37002.md) `CVE-2022-37002` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.4 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation - [Insufficient verification of data authenticity in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-37008.md) `CVE-2022-37008` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: CWE-345 - [The chinadrm module has an out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-37007.md) `CVE-2022-37007` · CVE record: Huawei HarmonyOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 - [The video framework has the memory overwriting vulnerability caused by addition overflow.](https://agentprime.io/advisories/CVE-2021-40034.md) `CVE-2021-40034` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 9 Aug 2022 - [Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.](https://agentprime.io/advisories/CVE-2021-40016.md) `CVE-2021-40016` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.](https://agentprime.io/advisories/CVE-2021-40013.md) `CVE-2021-40013` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [Vulnerability of pointers being incorrectly used during data transmission in the video framework.](https://agentprime.io/advisories/CVE-2021-40012.md) `CVE-2021-40012` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The SystemUI module has a vulnerability in permission control.](https://agentprime.io/advisories/CVE-2022-34738.md) `CVE-2022-34738` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The application security module has a vulnerability in permission assignment.](https://agentprime.io/advisories/CVE-2022-34737.md) `CVE-2022-34737` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The system module has a read/write vulnerability.](https://agentprime.io/advisories/CVE-2022-34742.md) `CVE-2022-34742` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The fingerprint module has a vulnerability of overflow in arithmetic addition.](https://agentprime.io/advisories/CVE-2022-34739.md) `CVE-2022-34739` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The NFC module has a buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2022-34741.md) `CVE-2022-34741` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The NFC module has a buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2022-34740.md) `CVE-2022-34740` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The AT commands of the USB port have an out-of-bounds read vulnerability.](https://agentprime.io/advisories/CVE-2022-34743.md) `CVE-2022-34743` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [The basic framework and setting module have defects, which were introduced during the design.](https://agentprime.io/advisories/CVE-2021-46741.md) `CVE-2021-46741` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Jul 2022 - [Missing authorization vulnerability in the system components.](https://agentprime.io/advisories/CVE-2022-31752.md) `CVE-2022-31752` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [Configuration defects in the secure OS module.](https://agentprime.io/advisories/CVE-2022-31761.md) `CVE-2022-31761` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [Vulnerability of residual files not being deleted after an update in the ChinaDRM module.](https://agentprime.io/advisories/CVE-2021-46813.md) `CVE-2021-46813` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [Logical defects in code implementation in some products.](https://agentprime.io/advisories/CVE-2022-31754.md) `CVE-2022-31754` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [HwSEServiceAPP has a vulnerability in permission management.](https://agentprime.io/advisories/CVE-2021-46811.md) `CVE-2021-46811` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The voice wakeup module has a vulnerability of using externally-controlled format strings.](https://agentprime.io/advisories/CVE-2022-31753.md) `CVE-2022-31753` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The setting module has a vulnerability of improper use of APIs.](https://agentprime.io/advisories/CVE-2022-31757.md) `CVE-2022-31757` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.](https://agentprime.io/advisories/CVE-2022-31760.md) `CVE-2022-31760` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The AMS module has a vulnerability in input validation.](https://agentprime.io/advisories/CVE-2022-31762.md) `CVE-2022-31762` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [AppLink has a vulnerability of accessing uninitialized pointers.](https://agentprime.io/advisories/CVE-2022-31759.md) `CVE-2022-31759` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The communication module has a vulnerability of improper permission preservation.](https://agentprime.io/advisories/CVE-2022-31755.md) `CVE-2022-31755` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The fingerprint sensor module has design defects.](https://agentprime.io/advisories/CVE-2022-31756.md) `CVE-2022-31756` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The kernel emcom module has multi-thread contention.](https://agentprime.io/advisories/CVE-2022-31751.md) `CVE-2022-31751` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The kernel module has the race condition vulnerability.](https://agentprime.io/advisories/CVE-2022-31758.md) `CVE-2022-31758` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [The video framework has an out-of-bounds memory read/write vulnerability.](https://agentprime.io/advisories/CVE-2021-46814.md) `CVE-2021-46814` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 Jun 2022 - [Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorre…](https://agentprime.io/advisories/CVE-2021-46788.md) `CVE-2021-46788` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.](https://agentprime.io/advisories/CVE-2021-46787.md) `CVE-2021-46787` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 13 May 2022 - [The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2021-40065.md) `CVE-2021-40065` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.](https://agentprime.io/advisories/CVE-2022-22253.md) `CVE-2022-22253` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.](https://agentprime.io/advisories/CVE-2021-46742.md) `CVE-2021-46742` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-22254.md) `CVE-2022-22254` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-22256.md) `CVE-2022-22256` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.](https://agentprime.io/advisories/CVE-2022-22257.md) `CVE-2022-22257` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 11 Apr 2022 - [There is a vulnerability of memory not being released after effective lifetime in the Bastet module.](https://agentprime.io/advisories/CVE-2021-40047.md) `CVE-2021-40047` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an incorrect buffer size calculation vulnerability in the video framework.](https://agentprime.io/advisories/CVE-2021-40048.md) `CVE-2021-40048` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is a permission control vulnerability in the PMS module.](https://agentprime.io/advisories/CVE-2021-40049.md) `CVE-2021-40049` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an out-of-bounds read vulnerability in the IFAA module.](https://agentprime.io/advisories/CVE-2021-40050.md) `CVE-2021-40050` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an unauthorized access vulnerability in system components.](https://agentprime.io/advisories/CVE-2021-40051.md) `CVE-2021-40051` · CVE record: Huawei EMUI and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2021-40052.md) `CVE-2021-40052` · CVE record: Huawei HarmonyOS and 2 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 - [There is an integer underflow vulnerability in the atcmdserver module.](https://agentprime.io/advisories/CVE-2021-40054.md) `CVE-2021-40054` · CVE record: Huawei EMUI and 1 more · No CVSS score · Not analysed yet · Published 7 Mar 2022 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .