HUAWEI EMUI

• CVE-2023-41297 Unrated Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking. 0.5%
• CVE-2023-41296 Unrated Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality. 0.4%
• CVE-2023-41295 Unrated Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim. 0.3%
• CVE-2023-39409 Unrated DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. 0.5%
• CVE-2023-39408 Unrated DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. 0.4%
• CVE-2021-46895 Unrated Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the 0.5%
• CVE-2023-39406 Unrated Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. 0.4%
• CVE-2023-39404 Unrated Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-39403 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.4%
• CVE-2023-39402 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.5%
• CVE-2023-39401 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.5%
• CVE-2023-39400 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.5%
• CVE-2023-39399 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.4%
• CVE-2023-39398 Critical 9.1 Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 0.4%
• CVE-2023-39397 High 7.5 Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-39395 High 7.5 Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-39394 Unrated Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. 0.3%
• CVE-2023-39391 Unrated Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-39390 Unrated Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-39387 Unrated Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. 0.3%
• CVE-2023-39386 Unrated Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart. 0.4%
• CVE-2023-39385 Unrated Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access. 0.4%
• CVE-2023-39384 Unrated Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-39383 Unrated Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security. 0.4%
• CVE-2023-39382 Unrated Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart. 0.4%
• CVE-2023-39381 Unrated Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-39380 Unrated Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. 0.4%
• CVE-2023-39405 Unrated Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges. 0.5%
• CVE-2023-39396 Unrated Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2023-39393 Unrated Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten. 0.2%
• CVE-2023-39392 Unrated Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten. 0.2%
• CVE-2023-39389 Unrated Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability. 0.4%
• CVE-2023-39388 Unrated Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability. 0.4%
• CVE-2022-48520 Unrated Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48519 Unrated Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48518 Unrated Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause maliciou 0.1%
• CVE-2023-1695 Unrated Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-1691 Unrated Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2022-48517 Unrated Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48516 Unrated Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality. 0.4%
• CVE-2022-48515 Unrated Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2022-48513 Unrated Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. 0.5%
• CVE-2021-46892 Unrated Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2022-48511 Unrated Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally. 0.5%
• CVE-2022-48510 Unrated Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. 0.5%
• CVE-2022-48509 Unrated Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally. 0.3%
• CVE-2022-48507 Unrated Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-34164 Unrated Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-3456 Unrated Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-37245 Unrated Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem. 0.5%