HUAWEI EMUI

• CVE-2022-37004 High 7.5 The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2022-37002 High 7.4 The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background. 0.5%
• CVE-2022-37008 High 7.5 The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability. 0.3%
• CVE-2022-37007 High 7.5 The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2021-40034 Unrated The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2021-40016 Unrated Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality. 0.3%
• CVE-2021-40013 Unrated Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity. 0.3%
• CVE-2021-40012 Unrated Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality. 0.9%
• CVE-2022-34738 Unrated The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background. 0.6%
• CVE-2022-34737 Unrated The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 0.7%
• CVE-2022-34742 Unrated The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.9%
• CVE-2022-34739 Unrated The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address map 0.7%
• CVE-2022-34741 Unrated The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. 0.3%
• CVE-2022-34740 Unrated The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. 0.3%
• CVE-2022-34743 Unrated The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-34736 Unrated The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. 0.7%
• CVE-2022-34735 Unrated The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. 0.7%
• CVE-2021-46741 Unrated The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity. 0.8%
• CVE-2022-31752 Unrated Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. 0.2%
• CVE-2022-31761 Unrated Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. 0.7%
• CVE-2021-46813 Unrated Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2022-31754 Unrated Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features. 0.7%
• CVE-2021-46811 Unrated HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. 0.5%
• CVE-2022-31753 Unrated The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-31757 Unrated The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2021-46812 Unrated The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. 0.6%
• CVE-2022-31760 Unrated Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 0.7%
• CVE-2022-31762 Unrated The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. 0.2%
• CVE-2022-31759 Unrated AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31755 Unrated The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31756 Unrated The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-31751 Unrated The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31758 Unrated The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.1%
• CVE-2022-31763 Unrated The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2021-46814 Unrated The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-29796 Unrated The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-29795 Unrated The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. 0.7%
• CVE-2022-29794 Unrated The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality. 0.8%
• CVE-2022-29792 Unrated The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-29791 Unrated The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-29790 Unrated The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions. 0.7%
• CVE-2022-29789 Unrated The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-22261 Unrated The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services. 0.7%
• CVE-2022-22260 Unrated The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. 0.7%
• CVE-2021-46788 Unrated Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrec 0.6%
• CVE-2021-46787 Unrated The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash. 0.8%
• CVE-2021-46786 Unrated The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access. 0.8%
• CVE-2021-46785 Unrated The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier. 0.5%
• CVE-2021-40065 Unrated The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.8%
• CVE-2021-46740 Unrated The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality. 0.8%