Advisories · Technology

Huawei Magic UI.

Every CVE that names Huawei Magic UI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-36601 CVE record

Out-of-bounds write vulnerability in the kernel modules.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 16 Sept 2022
CVE-2020-36600 CVE record

Out-of-bounds write vulnerability in the power consumption module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 16 Sept 2022
CVE-2022-39003 CVE record

Buffer overflow vulnerability in the video framework.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 16 Sept 2022
CVE-2022-39001 CVE record

CVSS 7.5 High

Path traversal in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Path traversal
Not analysed yet 16 Sept 2022
CVE-2022-38997 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38979 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-38978 CVE record

The secure OS module has configuration defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39005 CVE record

The MPTCP module has the memory leak vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39004 CVE record

The MPTCP module has the memory leak vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39006 CVE record

The MPTCP module has the race condition vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2022-39000 CVE record

The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Sept 2022
CVE-2021-40030 CVE record

CVSS 7.5 High

The My HUAWEI app has a defect in the design.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2022-37005 CVE record

CVSS 7.5 High

Argument injection in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Command injection
Not analysed yet 9 Aug 2022
CVE-2022-37003 CVE record

CVSS 6.5 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 9 Aug 2022
CVE-2022-37004 CVE record

CVSS 7.5 High

The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2022-37002 CVE record

CVSS 7.4 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-37008 CVE record

CVSS 7.5 High

Insufficient verification of data authenticity in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-345
Not analysed yet 9 Aug 2022
CVE-2022-37007 CVE record

CVSS 7.5 High

The chinadrm module has an out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2021-40034 CVE record

The video framework has the memory overwriting vulnerability caused by addition overflow.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 9 Aug 2022
CVE-2021-40016 CVE record

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 11 Jul 2022
CVE-2021-40013 CVE record

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 11 Jul 2022
CVE-2021-40012 CVE record

Vulnerability of pointers being incorrectly used during data transmission in the video framework.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34738 CVE record

The SystemUI module has a vulnerability in permission control.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34737 CVE record

The application security module has a vulnerability in permission assignment.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34742 CVE record

The system module has a read/write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34739 CVE record

The fingerprint module has a vulnerability of overflow in arithmetic addition.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34741 CVE record

The NFC module has a buffer overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34740 CVE record

The NFC module has a buffer overflow vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-34743 CVE record

The AT commands of the USB port have an out-of-bounds read vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2021-46741 CVE record

The basic framework and setting module have defects, which were introduced during the design.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Jul 2022
CVE-2022-31752 CVE record

Missing authorization vulnerability in the system components.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2022-31761 CVE record

Configuration defects in the secure OS module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2021-46813 CVE record

Vulnerability of residual files not being deleted after an update in the ChinaDRM module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2022-31754 CVE record

Logical defects in code implementation in some products.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 Jun 2022
CVE-2021-46811 CVE record

HwSEServiceAPP has a vulnerability in permission management.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31753 CVE record

The voice wakeup module has a vulnerability of using externally-controlled format strings.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31757 CVE record

The setting module has a vulnerability of improper use of APIs.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31760 CVE record

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31762 CVE record

The AMS module has a vulnerability in input validation.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31759 CVE record

AppLink has a vulnerability of accessing uninitialized pointers.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31755 CVE record

The communication module has a vulnerability of improper permission preservation.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31756 CVE record

The fingerprint sensor module has design defects.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31751 CVE record

The kernel emcom module has multi-thread contention.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2022-31758 CVE record

The kernel module has the race condition vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2021-46814 CVE record

The video framework has an out-of-bounds memory read/write vulnerability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 Jun 2022
CVE-2021-46788 CVE record

Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorre…
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 13 May 2022
CVE-2021-46787 CVE record

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 13 May 2022
CVE-2021-40065 CVE record

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22253 CVE record

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2021-46742 CVE record

The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22254 CVE record

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22256 CVE record

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2022-22257 CVE record

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Apr 2022
CVE-2021-40047 CVE record

There is a vulnerability of memory not being released after effective lifetime in the Bastet module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40048 CVE record

There is an incorrect buffer size calculation vulnerability in the video framework.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40049 CVE record

There is a permission control vulnerability in the PMS module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40050 CVE record

There is an out-of-bounds read vulnerability in the IFAA module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40051 CVE record

There is an unauthorized access vulnerability in system components.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022
CVE-2021-40052 CVE record

There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 7 Mar 2022
CVE-2021-40054 CVE record

There is an integer underflow vulnerability in the atcmdserver module.
- Huawei EMUI
- Huawei Magic UI
Not analysed yet 7 Mar 2022