Magic UI
by Huawei
CVEs (276)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-22324 | Hig | 0.49 | 7.5 | 0.01 | Jun 3, 2021 | There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. | ||
| CVE-2021-22322 | Hig | 0.49 | 7.5 | 0.01 | Jun 3, 2021 | There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. | ||
| CVE-2021-22317 | Hig | 0.49 | 7.5 | 0.01 | Jun 3, 2021 | There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. | ||
| CVE-2021-22313 | Hig | 0.49 | 7.5 | 0.01 | Jun 3, 2021 | There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. | ||
| CVE-2021-37069 | Hig | 0.48 | 7.4 | 0.01 | Dec 8, 2021 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected. | ||
| CVE-2021-22334 | Hig | 0.48 | 7.4 | 0.00 | Jun 3, 2021 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirections. | ||
| CVE-2021-22437 | Hig | 0.46 | 7.0 | 0.00 | Feb 25, 2022 | There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access. | ||
| CVE-2021-22386 | Hig | 0.46 | 7.0 | 0.00 | Aug 10, 2021 | A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges. | ||
| CVE-2021-22316 | Med | 0.44 | 6.8 | 0.00 | Jun 3, 2021 | There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device's data security and… | ||
| CVE-2022-34741 | Med | 0.42 | 6.5 | 0.00 | Jul 12, 2022 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. | ||
| CVE-2022-34740 | Med | 0.42 | 6.5 | 0.00 | Jul 12, 2022 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. | ||
| CVE-2021-40016 | Med | 0.42 | 6.5 | 0.00 | Jul 12, 2022 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality. | ||
| CVE-2021-40013 | Med | 0.42 | 6.5 | 0.00 | Jul 12, 2022 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity. | ||
| CVE-2021-40059 | Med | 0.42 | 6.5 | 0.00 | Mar 10, 2022 | There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality. | ||
| CVE-2021-37039 | Med | 0.42 | 6.5 | 0.00 | Dec 8, 2021 | There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS. | ||
| CVE-2022-39006 | Med | 0.38 | 5.9 | 0.00 | Sep 16, 2022 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. | ||
| CVE-2021-40055 | Med | 0.38 | 5.9 | 0.01 | Mar 10, 2022 | There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity. | ||
| CVE-2021-36987 | Med | 0.38 | 5.9 | 0.00 | Oct 28, 2021 | There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause the system to restart. | ||
| CVE-2022-31752 | Med | 0.36 | 5.5 | 0.00 | Jun 13, 2022 | Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. | ||
| CVE-2022-31759 | Med | 0.36 | 5.5 | 0.00 | Jun 13, 2022 | AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. |
- risk 0.49cvss 7.5epss 0.01
There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
- risk 0.49cvss 7.5epss 0.01
There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
- risk 0.49cvss 7.5epss 0.01
There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
- risk 0.49cvss 7.5epss 0.01
There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
- risk 0.48cvss 7.4epss 0.01
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
- risk 0.48cvss 7.4epss 0.00
There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirections.
- risk 0.46cvss 7.0epss 0.00
There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access.
- risk 0.46cvss 7.0epss 0.00
A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.
- risk 0.44cvss 6.8epss 0.00
There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device's data security and…
- risk 0.42cvss 6.5epss 0.00
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
- risk 0.42cvss 6.5epss 0.00
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
- risk 0.42cvss 6.5epss 0.00
Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.
- risk 0.42cvss 6.5epss 0.00
Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.
- risk 0.42cvss 6.5epss 0.00
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.
- risk 0.42cvss 6.5epss 0.00
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.
- risk 0.38cvss 5.9epss 0.00
The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.
- risk 0.38cvss 5.9epss 0.01
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.
- risk 0.38cvss 5.9epss 0.00
There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause the system to restart.
- risk 0.36cvss 5.5epss 0.00
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality.
- risk 0.36cvss 5.5epss 0.00
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.
Page 12 of 14