Emui
by Huawei
CVEs (745)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-22253 | 0.00 | — | 0.00 | Apr 11, 2022 | The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. | |||
| CVE-2022-22254 | 0.00 | — | 0.01 | Apr 11, 2022 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-22255 | 0.00 | — | 0.01 | Apr 11, 2022 | The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. | |||
| CVE-2022-22256 | 0.00 | — | 0.01 | Apr 11, 2022 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. | |||
| CVE-2022-22257 | 0.00 | — | 0.01 | Apr 11, 2022 | The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. | |||
| CVE-2021-40047 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity. | |||
| CVE-2021-40048 | 0.00 | — | 0.01 | Mar 7, 2022 | There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability. | |||
| CVE-2021-40049 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization. | |||
| CVE-2021-40050 | 0.00 | — | 0.01 | Mar 7, 2022 | There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow. | |||
| CVE-2021-40051 | 0.00 | — | 0.01 | Mar 7, 2022 | There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality. | |||
| CVE-2021-40052 | 0.00 | — | 0.01 | Mar 7, 2022 | There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2021-40054 | 0.00 | — | 0.01 | Mar 7, 2022 | There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity. | |||
| CVE-2021-40055 | 0.00 | — | 0.00 | Mar 7, 2022 | There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity. | |||
| CVE-2021-40056 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2021-40057 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2021-40058 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2021-40059 | 0.00 | — | 0.00 | Mar 7, 2022 | There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality. | |||
| CVE-2021-40060 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. | |||
| CVE-2021-40061 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity. | |||
| CVE-2021-40062 | 0.00 | — | 0.01 | Mar 7, 2022 | There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability. |
- CVE-2022-22253Apr 11, 2022risk 0.00cvss —epss 0.00
The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.
- CVE-2022-22254Apr 11, 2022risk 0.00cvss —epss 0.01
A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-22255Apr 11, 2022risk 0.00cvss —epss 0.01
The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.
- CVE-2022-22256Apr 11, 2022risk 0.00cvss —epss 0.01
The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
- CVE-2022-22257Apr 11, 2022risk 0.00cvss —epss 0.01
The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
- CVE-2021-40047Mar 7, 2022risk 0.00cvss —epss 0.01
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
- CVE-2021-40048Mar 7, 2022risk 0.00cvss —epss 0.01
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.
- CVE-2021-40049Mar 7, 2022risk 0.00cvss —epss 0.01
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.
- CVE-2021-40050Mar 7, 2022risk 0.00cvss —epss 0.01
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.
- CVE-2021-40051Mar 7, 2022risk 0.00cvss —epss 0.01
There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality.
- CVE-2021-40052Mar 7, 2022risk 0.00cvss —epss 0.01
There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.
- CVE-2021-40054Mar 7, 2022risk 0.00cvss —epss 0.01
There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.
- CVE-2021-40055Mar 7, 2022risk 0.00cvss —epss 0.00
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.
- CVE-2021-40056Mar 7, 2022risk 0.00cvss —epss 0.01
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.
- CVE-2021-40057Mar 7, 2022risk 0.00cvss —epss 0.01
There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
- CVE-2021-40058Mar 7, 2022risk 0.00cvss —epss 0.01
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
- CVE-2021-40059Mar 7, 2022risk 0.00cvss —epss 0.00
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.
- CVE-2021-40060Mar 7, 2022risk 0.00cvss —epss 0.01
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
- CVE-2021-40061Mar 7, 2022risk 0.00cvss —epss 0.01
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
- CVE-2021-40062Mar 7, 2022risk 0.00cvss —epss 0.01
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.
Page 30 of 38