Emui
by Huawei
CVEs (745)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-44559 | 0.00 | — | 0.01 | Nov 9, 2022 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. | |||
| CVE-2022-44563 | 0.00 | — | 0.00 | Nov 9, 2022 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-44551 | 0.00 | — | 0.00 | Nov 9, 2022 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability. | |||
| CVE-2021-46851 | 0.00 | — | 0.00 | Nov 9, 2022 | The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback. | |||
| CVE-2022-44546 | 0.00 | — | 0.00 | Nov 9, 2022 | The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart. | |||
| CVE-2022-44553 | 0.00 | — | 0.00 | Nov 9, 2022 | The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically. | |||
| CVE-2022-41593 | 0.00 | — | 0.00 | Oct 14, 2022 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | |||
| CVE-2022-41586 | 0.00 | — | 0.00 | Oct 14, 2022 | The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-41584 | 0.00 | — | 0.00 | Oct 14, 2022 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. | |||
| CVE-2022-41576 | 0.00 | — | 0.00 | Oct 14, 2022 | The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices. | |||
| CVE-2022-38983 | 0.00 | — | 0.01 | Oct 14, 2022 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. | |||
| CVE-2022-41577 | 0.00 | — | 0.00 | Oct 14, 2022 | The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability. | |||
| CVE-2022-41601 | 0.00 | — | 0.00 | Oct 14, 2022 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | |||
| CVE-2022-38985 | 0.00 | — | 0.00 | Oct 14, 2022 | The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-41603 | 0.00 | — | 0.00 | Oct 14, 2022 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. | |||
| CVE-2022-41589 | 0.00 | — | 0.00 | Oct 14, 2022 | The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability. | |||
| CVE-2022-41588 | 0.00 | — | 0.00 | Oct 14, 2022 | The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. | |||
| CVE-2022-41581 | 0.00 | — | 0.00 | Oct 14, 2022 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | |||
| CVE-2022-41578 | 0.00 | — | 0.01 | Oct 14, 2022 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information. | |||
| CVE-2022-38984 | 0.00 | — | 0.00 | Oct 14, 2022 | The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality. |
- CVE-2022-44559Nov 9, 2022risk 0.00cvss —epss 0.01
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
- CVE-2022-44563Nov 9, 2022risk 0.00cvss —epss 0.00
There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-44551Nov 9, 2022risk 0.00cvss —epss 0.00
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.
- CVE-2021-46851Nov 9, 2022risk 0.00cvss —epss 0.00
The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback.
- CVE-2022-44546Nov 9, 2022risk 0.00cvss —epss 0.00
The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart.
- CVE-2022-44553Nov 9, 2022risk 0.00cvss —epss 0.00
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically.
- CVE-2022-41593Oct 14, 2022risk 0.00cvss —epss 0.00
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
- CVE-2022-41586Oct 14, 2022risk 0.00cvss —epss 0.00
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-41584Oct 14, 2022risk 0.00cvss —epss 0.00
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
- CVE-2022-41576Oct 14, 2022risk 0.00cvss —epss 0.00
The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices.
- CVE-2022-38983Oct 14, 2022risk 0.00cvss —epss 0.01
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution.
- CVE-2022-41577Oct 14, 2022risk 0.00cvss —epss 0.00
The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability.
- CVE-2022-41601Oct 14, 2022risk 0.00cvss —epss 0.00
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
- CVE-2022-38985Oct 14, 2022risk 0.00cvss —epss 0.00
The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-41603Oct 14, 2022risk 0.00cvss —epss 0.00
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
- CVE-2022-41589Oct 14, 2022risk 0.00cvss —epss 0.00
The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
- CVE-2022-41588Oct 14, 2022risk 0.00cvss —epss 0.00
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.
- CVE-2022-41581Oct 14, 2022risk 0.00cvss —epss 0.00
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
- CVE-2022-41578Oct 14, 2022risk 0.00cvss —epss 0.01
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.
- CVE-2022-38984Oct 14, 2022risk 0.00cvss —epss 0.00
The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.
Page 24 of 38