Huawei Emui vulnerabilities

CVE-2021-40064 [HIGH] CWE-787 CVE-2021-40064: There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability.

CVE-2021-46741 [HIGH] CVE-2021-46741: The basic framework and setting module have defects, which were introduced during the design. Succes The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.

CVE-2021-40049 [HIGH] CWE-276 CVE-2021-40049: There is a permission control vulnerability in the PMS module. Successful exploitation of this vulne There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.

CVE-2021-40057 [HIGH] CWE-787 CVE-2021-40057: There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successf There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-40058 [HIGH] CWE-787 CVE-2021-40058: There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-40060 [HIGH] CWE-787 CVE-2021-40060: There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-37033 [HIGH] CWE-74 CVE-2021-37033: There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vuln There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-37034 [HIGH] CVE-2021-37034: There is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this vulnerab There is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22481 [HIGH] CVE-2021-22481: There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vu There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22472 [HIGH] CVE-2021-22472: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22486 [HIGH] CVE-2021-22486: There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22372 [HIGH] CVE-2021-22372: There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vul There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22313 [HIGH] CVE-2021-22313: There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vul There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.

CVE-2021-37110 [HIGH] CVE-2021-37110: There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may aff There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-39966 [HIGH] CWE-909 CVE-2021-39966: There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulner There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2020-9158 [HIGH] CVE-2020-9158: There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr.

CVE-2021-40020 [HIGH] CWE-125 CVE-2021-40020: There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Su There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37044 [HIGH] CWE-281 CVE-2021-37044: There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-37043 [HIGH] CWE-287 CVE-2021-37043: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources.

CVE-2021-39967 [HIGH] CWE-276 CVE-2021-39967: There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast per There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.