Emui
by Huawei
CVEs (745)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-58302 | 0.00 | — | 0.00 | Nov 28, 2025 | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-58314 | 0.00 | — | 0.00 | Nov 28, 2025 | Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |||
| CVE-2025-58276 | 0.00 | — | 0.00 | Sep 5, 2025 | Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-54646 | 0.00 | — | 0.00 | Aug 6, 2025 | Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance. | |||
| CVE-2025-54644 | 0.00 | — | 0.00 | Aug 6, 2025 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-54643 | 0.00 | — | 0.00 | Aug 6, 2025 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-54642 | 0.00 | — | 0.00 | Aug 6, 2025 | Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-54641 | 0.00 | — | 0.00 | Aug 6, 2025 | Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-54637 | 0.00 | — | 0.00 | Aug 6, 2025 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-54636 | 0.00 | — | 0.00 | Aug 6, 2025 | Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-54632 | 0.00 | — | 0.00 | Aug 6, 2025 | Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. | |||
| CVE-2025-54631 | 0.00 | — | 0.00 | Aug 6, 2025 | Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-54629 | 0.00 | — | 0.00 | Aug 6, 2025 | Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity. | |||
| CVE-2025-54628 | 0.00 | — | 0.00 | Aug 6, 2025 | Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-54611 | 0.00 | — | 0.00 | Aug 6, 2025 | EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||
| CVE-2025-53186 | 0.00 | — | 0.00 | Jul 7, 2025 | Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2025-53185 | 0.00 | — | 0.00 | Jul 7, 2025 | Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity. | |||
| CVE-2025-53178 | 0.00 | — | 0.00 | Jul 7, 2025 | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units. | |||
| CVE-2025-53177 | 0.00 | — | 0.00 | Jul 7, 2025 | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches. | |||
| CVE-2025-48902 | 0.00 | — | 0.00 | Jun 6, 2025 | Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. |
- CVE-2025-58302Nov 28, 2025risk 0.00cvss —epss 0.00
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-58314Nov 28, 2025risk 0.00cvss —epss 0.00
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- CVE-2025-58276Sep 5, 2025risk 0.00cvss —epss 0.00
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54646Aug 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance.
- CVE-2025-54644Aug 6, 2025risk 0.00cvss —epss 0.00
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-54643Aug 6, 2025risk 0.00cvss —epss 0.00
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-54642Aug 6, 2025risk 0.00cvss —epss 0.00
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54641Aug 6, 2025risk 0.00cvss —epss 0.00
Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54637Aug 6, 2025risk 0.00cvss —epss 0.00
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-54636Aug 6, 2025risk 0.00cvss —epss 0.00
Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54632Aug 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity.
- CVE-2025-54631Aug 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54629Aug 6, 2025risk 0.00cvss —epss 0.00
Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
- CVE-2025-54628Aug 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54611Aug 6, 2025risk 0.00cvss —epss 0.00
EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2025-53186Jul 7, 2025risk 0.00cvss —epss 0.00
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-53185Jul 7, 2025risk 0.00cvss —epss 0.00
Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity.
- CVE-2025-53178Jul 7, 2025risk 0.00cvss —epss 0.00
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.
- CVE-2025-53177Jul 7, 2025risk 0.00cvss —epss 0.00
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.
- CVE-2025-48902Jun 6, 2025risk 0.00cvss —epss 0.00
Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.
Page 2 of 38