Huawei Emui vulnerabilities

CVE-2024-56448 [HIGH] CWE-94 CVE-2024-56448: Vulnerability of improper access control in the home screen widget module Impact: Successful exploit Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-57960 [HIGH] CWE-20 CVE-2024-57960: Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitati Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-56434 [HIGH] CWE-416 CVE-2024-56434: UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerabi UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.

CVE-2021-37042 [CRITICAL] CWE-125 CVE-2021-37042: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.

CVE-2021-37041 [CRITICAL] CWE-125 CVE-2021-37041: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.

CVE-2021-22380 [CRITICAL] CWE-319 CVE-2021-22380: There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Succe There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality and availability.

CVE-2021-36999 [HIGH] CWE-120 CVE-2021-36999: There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulner There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to open the images may cause remote code execution.

CVE-2023-26547 [HIGH] CWE-502 CVE-2023-26547: The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exp The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.

CVE-2021-22385 [HIGH] CWE-668 CVE-2021-22385: A component of the Huawei smartphone has a External Control of System or Configuration Setting vulne A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.

CVE-2021-39992 [HIGH] CWE-732 CVE-2021-39992: There is an improper security permission configuration vulnerability on ACPU.Successful exploitation There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

CVE-2021-40027 [HIGH] CWE-476 CVE-2021-40027: The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-34742 [HIGH] CWE-125 CVE-2022-34742: The system module has a read/write vulnerability. Successful exploitation of this vulnerability may The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2021-40065 [HIGH] CVE-2021-40065: The communication module has a service logic error vulnerability.Successful exploitation of this vul The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2021-22336 [HIGH] CWE-94 CVE-2021-22336: There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful ex There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device.

CVE-2021-37037 [HIGH] CVE-2021-37037: There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of thi There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart.

CVE-2021-22412 [HIGH] CWE-190 CVE-2021-22412: There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vuln There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random kernel address access.

CVE-2021-22370 [HIGH] CVE-2021-22370: There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22324 [HIGH] CVE-2021-22324: There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.

CVE-2021-36985 [HIGH] CWE-94 CVE-2021-36985: There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart.

CVE-2021-37075 [HIGH] CVE-2021-37075: There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.