Emui
by Huawei
CVEs (820)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-46887 | Cri | 0.64 | 9.8 | 0.00 | May 26, 2023 | Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read. | ||
| CVE-2022-48353 | Cri | 0.64 | 9.8 | 0.00 | Mar 27, 2023 | Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions. | ||
| CVE-2022-46327 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions. | ||
| CVE-2022-46326 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. | ||
| CVE-2022-46325 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. | ||
| CVE-2022-46324 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. | ||
| CVE-2022-46323 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions. | ||
| CVE-2022-46320 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting. | ||
| CVE-2022-46319 | Cri | 0.64 | 9.8 | 0.00 | Dec 20, 2022 | Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write. | ||
| CVE-2022-44562 | Cri | 0.64 | 9.8 | 0.01 | Nov 9, 2022 | The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. | ||
| CVE-2022-44559 | Cri | 0.64 | 9.8 | 0.01 | Nov 9, 2022 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. | ||
| CVE-2022-44558 | Cri | 0.64 | 9.8 | 0.01 | Nov 9, 2022 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. | ||
| CVE-2022-44551 | Cri | 0.64 | 9.8 | 0.00 | Nov 9, 2022 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability. | ||
| CVE-2021-46851 | Cri | 0.64 | 9.8 | 0.00 | Nov 9, 2022 | The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback. | ||
| CVE-2022-41580 | Cri | 0.64 | 9.8 | 0.01 | Oct 14, 2022 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | ||
| CVE-2022-41578 | Cri | 0.64 | 9.8 | 0.01 | Oct 14, 2022 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information. | ||
| CVE-2022-38983 | Cri | 0.64 | 9.8 | 0.01 | Oct 14, 2022 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. | ||
| CVE-2022-39009 | Cri | 0.64 | 9.8 | 0.01 | Sep 16, 2022 | The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functions. | ||
| CVE-2022-39007 | Cri | 0.64 | 9.8 | 0.01 | Sep 16, 2022 | The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. | ||
| CVE-2022-39002 | Cri | 0.64 | 9.8 | 0.01 | Sep 16, 2022 | Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. |
- risk 0.64cvss 9.8epss 0.00
Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read.
- risk 0.64cvss 9.8epss 0.00
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions.
- risk 0.64cvss 9.8epss 0.00
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions.
- risk 0.64cvss 9.8epss 0.00
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
- risk 0.64cvss 9.8epss 0.00
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.
- risk 0.64cvss 9.8epss 0.00
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
- risk 0.64cvss 9.8epss 0.00
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.
- risk 0.64cvss 9.8epss 0.00
The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.
- risk 0.64cvss 9.8epss 0.00
Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write.
- risk 0.64cvss 9.8epss 0.01
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
- risk 0.64cvss 9.8epss 0.01
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
- risk 0.64cvss 9.8epss 0.01
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
- risk 0.64cvss 9.8epss 0.00
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.
- risk 0.64cvss 9.8epss 0.00
The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback.
- risk 0.64cvss 9.8epss 0.01
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
- risk 0.64cvss 9.8epss 0.01
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.
- risk 0.64cvss 9.8epss 0.01
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution.
- risk 0.64cvss 9.8epss 0.01
The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functions.
- risk 0.64cvss 9.8epss 0.01
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation.
- risk 0.64cvss 9.8epss 0.01
Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.
Page 2 of 41