HUAWEI EMUI

• CVE-2022-38998 High 7.5 The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidenti 0.5%
• CVE-2022-38984 High 7.5 The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidenti 0.5%
• CVE-2021-46839 Critical 9.1 The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds acc 0.5%
• CVE-2022-38983 Critical 9.8 The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. 0.8%
• CVE-2022-38985 High 7.5 The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2021-46840 Critical 9.1 The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in 0.5%
• CVE-2022-41603 Low 3.4 The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerp 0.2%
• CVE-2022-38986 Critical 9.1 The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module a 0.6%
• CVE-2022-41577 High 7.1 The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, wh 0.2%
• CVE-2022-41592 Low 3.4 The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerp 0.2%
• CVE-2022-41586 High 7.5 The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-41595 Low 3.4 The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerp 0.2%
• CVE-2022-41578 Critical 9.8 The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information. 0.6%
• CVE-2022-41594 Low 3.4 The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerp 0.2%
• CVE-2022-41584 High 7.8 The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. 0.2%
• CVE-2022-41593 Low 3.4 The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerp 0.2%
• CVE-2022-41598 Low 3.4 The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerp 0.2%
• CVE-2020-36601 Unrated Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. 0.6%
• CVE-2020-36600 Unrated Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. 0.6%
• CVE-2022-39003 Unrated Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components. 0.5%
• CVE-2021-40019 Unrated Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.6%
• CVE-2021-40023 Unrated Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. 0.5%
• CVE-2022-39010 Unrated The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network information. 0.6%
• CVE-2022-39009 Critical 9.8 The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functions. 0.7%
• CVE-2022-39001 High 7.5 The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. 0.9%
• CVE-2022-39007 Critical 9.8 The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. 0.7%
• CVE-2022-38999 Unrated The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability. 0.6%
• CVE-2022-38997 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38996 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38995 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38994 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38992 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38991 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38979 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38978 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38989 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38988 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-39005 Unrated The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. 0.6%
• CVE-2022-39004 Unrated The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. 0.6%
• CVE-2022-38987 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-39006 Unrated The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2022-38993 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-38990 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2022-39000 Unrated The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup. 0.6%
• CVE-2021-46836 Unrated Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2021-40024 Unrated Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-39008 Critical 9.1 The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to sy 0.7%
• CVE-2021-40030 High 7.5 The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-37005 High 7.5 The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-37003 Medium 6.5 The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files. 0.5%