HUAWEI EMUI

• CVE-2023-37242 Unrated Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate t 0.4%
• CVE-2023-37241 Unrated Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2023-37240 Unrated Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read. 0.5%
• CVE-2023-37239 Unrated Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program. 0.5%
• CVE-2023-37238 Unrated Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projecti 0.3%
• CVE-2021-46894 Unrated Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation. 0.4%
• CVE-2022-48512 Unrated Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally. 0.5%
• CVE-2022-48508 Unrated Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. 0.3%
• CVE-2023-3455 Unrated Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity. 0.4%
• CVE-2021-46893 Unrated Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity. 0.3%
• CVE-2021-46891 Unrated Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.4%
• CVE-2021-46890 Unrated Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.4%
• CVE-2022-48500 High 7.5 Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48489 Unrated Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48492 Unrated Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48498 High 7.5 Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48497 Unrated Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48495 Unrated Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained. 0.3%
• CVE-2022-48490 Unrated Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48491 Unrated Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time. 0.3%
• CVE-2022-48488 Medium 5.3 Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desktop. 0.3%
• CVE-2022-48499 High 7.5 Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-34166 High 7.5 Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart. 0.4%
• CVE-2023-34162 High 7.5 Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail. 0.4%
• CVE-2023-34167 Medium 5.3 Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 0.3%
• CVE-2023-34160 Medium 5.3 Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 0.3%
• CVE-2023-34159 Critical 9.8 Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality. 0.5%
• CVE-2023-34156 Unrated Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied. 0.4%
• CVE-2023-34158 Medium 5.3 Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 0.3%
• CVE-2023-34163 High 7.5 Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-34161 High 7.5 nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-34155 Unrated Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2022-48501 High 7.5 Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48487 Unrated Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48494 Unrated Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. 0.3%
• CVE-2022-48496 Unrated Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. 0.3%
• CVE-2022-48486 High 7.5 Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48493 Unrated Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2021-46881 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46884 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-0117 Medium 5.3 The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as M 0.4%
• CVE-2023-31225 Low 3.3 The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. 0.1%
• CVE-2023-31226 High 7.5 The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-0116 High 7.5 The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2021-46885 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46886 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46883 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46882 High 7.5 The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2021-46887 Critical 9.8 Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read. 0.5%
• CVE-2022-48480 High 7.5 Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%