HUAWEI EMUI

• CVE-2025-54636 Medium 4.4 Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54632 Medium 6.8 Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. 0.1%
• CVE-2025-54631 Medium 6.7 Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-54629 Medium 6.7 Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity. <0.1%
• CVE-2025-54628 Medium 5.3 Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2025-54611 High 7.3 EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-53186 Medium 5.9 Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-53185 Medium 6.6 Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect s 0.1%
• CVE-2025-53178 Medium 4.8 Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units. <0.1%
• CVE-2025-53177 Low 3.9 Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches. <0.1%
• CVE-2025-48902 Medium 6.6 Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-31175 High 8.4 Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. 0.2%
• CVE-2025-31170 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58127 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58126 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58125 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58124 High 8.4 Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2024-58044 High 8.4 Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-58043 High 7.3 Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-57961 Medium 6.8 Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.3%
• CVE-2024-57960 High 7.7 Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-57959 Medium 6.1 Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-57958 Medium 5.7 Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-56450 Medium 6.3 Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-56449 Medium 6.6 Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-56448 Medium 6.7 Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-56447 High 7.8 Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-56442 Medium 5.5 Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-56441 Medium 4.1 Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-56440 Medium 6.2 Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-56438 Medium 6.0 Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-52955 Medium 6.5 Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2023-52954 Medium 4.4 Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-52953 Medium 6.2 Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.3%
• CVE-2024-56434 Medium 4.4 UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. 0.2%
• CVE-2024-54101 Medium 6.2 Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability. 0.1%
• CVE-2024-54100 Medium 6.2 Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 0.2%
• CVE-2024-54099 Medium 6.7 File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.1%
• CVE-2024-54098 High 8.5 Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity. 0.2%
• CVE-2024-54097 High 7.3 Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity. 0.3%
• CVE-2024-54096 Medium 5.3 Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy. 0.1%
• CVE-2024-51528 Medium 4.0 Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51527 Medium 5.1 Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-51510 High 7.6 Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-9136 Medium 6.7 Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2024-47294 Medium 4.4 Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-47293 Medium 4.7 Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2024-47292 Medium 6.2 Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2024-47291 Medium 5.6 Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2024-47290 Medium 5.5 Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability. 0.1%