Huawei Emui vulnerabilities

CVE-2021-39967 [HIGH] CWE-276 CVE-2021-39967: There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast per There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22368 [HIGH] CWE-276 CVE-2021-22368: There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vu There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect normal use of the device.

CVE-2021-37044 [HIGH] CWE-281 CVE-2021-37044: There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-37043 [HIGH] CWE-287 CVE-2021-37043: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources.

CVE-2021-46789 [HIGH] CVE-2021-46789: Configuration defects in the secure OS module. Successful exploitation of this vulnerability can aff Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.

CVE-2023-52713 [HIGH] CWE-862 CVE-2023-52713: Vulnerability of improper permission control in the window management module. Impact: Successful exp Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2023-52367 [HIGH] CWE-284 CVE-2023-52367: Vulnerability of improper access control in the media library module.Successful exploitation of this Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

CVE-2021-46814 [HIGH] CWE-125 CVE-2021-46814: The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-40047 [HIGH] CWE-401 CVE-2021-40047: There is a vulnerability of memory not being released after effective lifetime in the Bastet module. There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

CVE-2021-40038 [HIGH] CWE-415 CVE-2021-40038: There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of th There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-40039 [HIGH] CWE-476 CVE-2021-40039: There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful ex There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-46813 [HIGH] CWE-212 CVE-2021-46813: Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.

CVE-2021-40031 [HIGH] CWE-476 CVE-2021-40031: There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful ex There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-37001 [HIGH] CVE-2021-37001: There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified.

CVE-2024-32992 [HIGH] CWE-20 CVE-2024-32992: Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of th Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2022-37006 [HIGH] CWE-276 CVE-2022-37006: Permission control vulnerability in the network module. Successful exploitation of this vulnerabilit Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.

CVE-2023-46758 [HIGH] CWE-269 CVE-2023-46758: Permission management vulnerability in the multi-screen interaction module. Successful exploitation Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.

CVE-2021-40030 [HIGH] CVE-2021-40030: The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affe The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-46322 [HIGH] CWE-787 CVE-2022-46322: Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnera Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.

CVE-2022-44555 [HIGH] CWE-294 CVE-2022-44555: The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable.