HUAWEI EMUI

• CVE-2023-31227 High 7.5 The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality. 0.4%
• CVE-2023-1696 High 7.5 The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-1694 High 7.5 The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-1693 High 7.5 The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-1692 High 7.5 The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48314 Medium 6.5 The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2022-48313 Medium 6.5 The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2022-48312 Critical 9.1 The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. 0.4%
• CVE-2022-48361 Unrated The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources. 0.4%
• CVE-2022-48350 High 7.5 The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48347 Unrated The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48351 High 7.5 The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2022-48349 Critical 9.1 The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability. 0.5%
• CVE-2022-48354 Unrated The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. 0.2%
• CVE-2023-26547 Unrated The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. 0.2%
• CVE-2022-48358 Unrated The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions. 0.3%
• CVE-2022-48348 Critical 9.1 The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity. 0.4%
• CVE-2022-48353 Critical 9.8 Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions. 0.5%
• CVE-2022-48360 Unrated The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2022-48352 High 7.5 Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic. 0.5%
• CVE-2022-48355 Unrated The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash. 0.2%
• CVE-2022-48291 Unrated The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. 0.2%
• CVE-2022-48346 Unrated The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality. 0.5%
• CVE-2023-26549 Unrated The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-26548 Unrated The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability. 0.5%
• CVE-2022-48357 Unrated Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel. 0.5%
• CVE-2022-48359 Unrated The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality. 0.5%
• CVE-2022-48356 Unrated The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition. 0.5%
• CVE-2022-48295 High 7.5 The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications). 0.3%
• CVE-2022-48296 Medium 5.3 The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information ab 0.3%
• CVE-2022-48294 High 7.5 The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48289 High 7.5 The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48286 High 7.5 The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48297 High 7.5 The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. 0.4%
• CVE-2022-48300 High 7.5 The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48287 High 7.5 The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity. 0.4%
• CVE-2022-48299 High 7.5 The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48293 Medium 6.5 The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-48292 Medium 6.5 The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-48301 High 7.5 The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled. 0.3%
• CVE-2022-48288 High 7.5 The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2022-48298 High 7.5 The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. 0.4%
• CVE-2022-48302 High 7.5 The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality. 0.4%
• CVE-2021-46867 High 7.5 The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. 0.4%
• CVE-2022-46762 High 7.5 The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-46761 High 7.5 The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons. 0.3%
• CVE-2022-47974 Medium 6.5 The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart. 0.2%
• CVE-2022-47975 High 7.5 The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.6%
• CVE-2021-46868 High 7.5 The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. 0.4%
• CVE-2022-47976 High 7.5 The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections. 0.4%