HUAWEI Magic UI

• CVE-2020-36601 Unrated Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. 0.6%
• CVE-2020-36600 Unrated Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. 0.6%
• CVE-2022-39003 Unrated Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components. 0.5%
• CVE-2022-39001 High 7.5 The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. 0.9%
• CVE-2022-38997 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38979 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-38978 Unrated The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.5%
• CVE-2022-39005 Unrated The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. 0.6%
• CVE-2022-39004 Unrated The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. 0.6%
• CVE-2022-39006 Unrated The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. 0.4%
• CVE-2022-39000 Unrated The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup. 0.6%
• CVE-2021-40030 High 7.5 The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-37005 High 7.5 The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.6%
• CVE-2022-37003 Medium 6.5 The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files. 0.5%
• CVE-2022-37004 High 7.5 The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2022-37002 High 7.4 The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background. 0.5%
• CVE-2022-37008 High 7.5 The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability. 0.3%
• CVE-2022-37007 High 7.5 The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2021-40034 Unrated The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability. 0.6%
• CVE-2021-40016 Unrated Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality. 0.3%
• CVE-2021-40013 Unrated Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity. 0.3%
• CVE-2021-40012 Unrated Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality. 0.9%
• CVE-2022-34738 Unrated The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background. 0.6%
• CVE-2022-34737 Unrated The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 0.7%
• CVE-2022-34742 Unrated The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.9%
• CVE-2022-34739 Unrated The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address map 0.7%
• CVE-2022-34741 Unrated The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. 0.3%
• CVE-2022-34740 Unrated The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation. 0.3%
• CVE-2022-34743 Unrated The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2021-46741 Unrated The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity. 0.8%
• CVE-2022-31752 Unrated Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. 0.2%
• CVE-2022-31761 Unrated Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. 0.7%
• CVE-2021-46813 Unrated Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability. 0.7%
• CVE-2022-31754 Unrated Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features. 0.7%
• CVE-2021-46811 Unrated HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. 0.5%
• CVE-2022-31753 Unrated The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2022-31757 Unrated The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. 0.7%
• CVE-2022-31760 Unrated Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 0.7%
• CVE-2022-31762 Unrated The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. 0.2%
• CVE-2022-31759 Unrated AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31755 Unrated The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31756 Unrated The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. 0.2%
• CVE-2022-31751 Unrated The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. 0.2%
• CVE-2022-31758 Unrated The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 0.1%
• CVE-2021-46814 Unrated The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. 0.7%
• CVE-2021-46788 Unrated Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrec 0.6%
• CVE-2021-46787 Unrated The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash. 0.8%
• CVE-2021-40065 Unrated The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. 0.8%
• CVE-2022-22253 Unrated The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability. 0.3%
• CVE-2021-46742 Unrated The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability. 0.7%