HUAWEI EMUI

• CVE-2021-46742 Unrated The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability. 0.7%
• CVE-2022-22253 Unrated The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. 0.3%
• CVE-2022-22254 Unrated A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-22255 Unrated The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. 0.7%
• CVE-2022-22256 Unrated The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-22257 Unrated The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. 0.6%
• CVE-2021-40047 Unrated There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity. 0.6%
• CVE-2021-40048 Unrated There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability. 0.8%
• CVE-2021-40049 Unrated There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization. 0.8%
• CVE-2021-40050 Unrated There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow. 1.1%
• CVE-2021-40051 Unrated There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality. 0.8%
• CVE-2021-40052 Unrated There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability. 0.8%
• CVE-2021-40054 Unrated There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity. 0.6%
• CVE-2021-40055 Unrated There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity. 0.5%
• CVE-2021-40056 Unrated There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2021-40057 Unrated There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2021-40058 Unrated There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2021-40059 Unrated There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality. 0.3%
• CVE-2021-40060 Unrated There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2021-40061 Unrated There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity. 0.6%
• CVE-2021-40062 Unrated There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2021-40063 Unrated There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality. 0.7%
• CVE-2021-40064 Unrated There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability. 0.8%
• CVE-2021-37103 Unrated There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2021-22429 Unrated There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22432 Unrated There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.9%
• CVE-2021-22426 Unrated There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22430 Unrated There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection. 0.9%
• CVE-2021-22431 Unrated There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.8%
• CVE-2021-22433 Unrated There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22434 Unrated There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 0.9%
• CVE-2021-22395 Unrated There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2021-22394 Unrated There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaboration. 0.8%
• CVE-2021-22319 Unrated There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows. 0.7%
• CVE-2021-37027 Unrated There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity. 0.7%
• CVE-2021-22489 Unrated There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability. 0.7%
• CVE-2021-22448 Unrated There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files. 0.7%
• CVE-2021-22437 Unrated There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access. 0.2%
• CVE-2021-40015 Unrated There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability. 0.1%
• CVE-2021-40044 Unrated There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations. 0.3%
• CVE-2021-40045 Unrated There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2021-39997 Unrated There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access. 0.8%
• CVE-2021-39994 Unrated There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.9%
• CVE-2021-39992 Unrated There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.2%
• CVE-2021-37107 Unrated There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access. 0.2%
• CVE-2021-37109 Unrated There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure. 0.2%
• CVE-2021-37115 Unrated There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2021-39986 Unrated There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2021-39991 Unrated There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2021-40032 Unrated The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality. 0.9%