Emui
by Huawei
CVEs (820)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-39398 | Cri | 0.59 | 9.1 | 0.00 | Aug 13, 2023 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. | ||
| CVE-2023-39385 | Cri | 0.59 | 9.1 | 0.00 | Aug 13, 2023 | Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access. | ||
| CVE-2021-46895 | Cri | 0.59 | 9.1 | 0.00 | Aug 13, 2023 | Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop. | ||
| CVE-2023-37245 | Cri | 0.59 | 9.1 | 0.00 | Jul 6, 2023 | Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem. | ||
| CVE-2023-37240 | Cri | 0.59 | 9.1 | 0.00 | Jul 6, 2023 | Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read. | ||
| CVE-2023-3455 | Cri | 0.59 | 9.1 | 0.00 | Jul 5, 2023 | Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity. | ||
| CVE-2022-48312 | Cri | 0.59 | 9.1 | 0.00 | Apr 16, 2023 | The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. | ||
| CVE-2022-48349 | Cri | 0.59 | 9.1 | 0.00 | Mar 27, 2023 | The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability. | ||
| CVE-2022-48348 | Cri | 0.59 | 9.1 | 0.00 | Mar 27, 2023 | The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity. | ||
| CVE-2022-41581 | Cri | 0.59 | 9.1 | 0.00 | Oct 14, 2022 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | ||
| CVE-2022-38986 | Cri | 0.59 | 9.1 | 0.01 | Oct 14, 2022 | The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability. | ||
| CVE-2021-46840 | Cri | 0.59 | 9.1 | 0.00 | Oct 14, 2022 | The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | ||
| CVE-2021-46839 | Cri | 0.59 | 9.1 | 0.00 | Oct 14, 2022 | The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | ||
| CVE-2022-39008 | Cri | 0.59 | 9.1 | 0.01 | Sep 16, 2022 | The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps. | ||
| CVE-2022-39003 | Cri | 0.59 | 9.1 | 0.00 | Sep 16, 2022 | Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components. | ||
| CVE-2021-40019 | Cri | 0.59 | 9.1 | 0.01 | Sep 16, 2022 | Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access. | ||
| CVE-2022-34737 | Cri | 0.59 | 9.1 | 0.01 | Jul 12, 2022 | The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality. | ||
| CVE-2022-31760 | Cri | 0.59 | 9.1 | 0.01 | Jun 13, 2022 | Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. | ||
| CVE-2022-22260 | Cri | 0.59 | 9.1 | 0.01 | May 13, 2022 | The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. | ||
| CVE-2021-46742 | Cri | 0.59 | 9.1 | 0.01 | Apr 11, 2022 | The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability. |
- risk 0.59cvss 9.1epss 0.00
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- risk 0.59cvss 9.1epss 0.00
Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access.
- risk 0.59cvss 9.1epss 0.00
Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.
- risk 0.59cvss 9.1epss 0.00
Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem.
- risk 0.59cvss 9.1epss 0.00
Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read.
- risk 0.59cvss 9.1epss 0.00
Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity.
- risk 0.59cvss 9.1epss 0.00
The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity.
- risk 0.59cvss 9.1epss 0.00
The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability.
- risk 0.59cvss 9.1epss 0.00
The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity.
- risk 0.59cvss 9.1epss 0.00
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
- risk 0.59cvss 9.1epss 0.01
The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability.
- risk 0.59cvss 9.1epss 0.00
The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
- risk 0.59cvss 9.1epss 0.00
The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
- risk 0.59cvss 9.1epss 0.01
The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps.
- risk 0.59cvss 9.1epss 0.00
Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components.
- risk 0.59cvss 9.1epss 0.01
Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access.
- risk 0.59cvss 9.1epss 0.01
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
- risk 0.59cvss 9.1epss 0.01
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
- risk 0.59cvss 9.1epss 0.01
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.
- risk 0.59cvss 9.1epss 0.01
The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.
Page 6 of 41