Huawei Emui vulnerabilities

CVE-2023-34163 [HIGH] CVE-2023-34163: Permission control vulnerability in the window management module.Successful exploitation of this vul Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-34162 [HIGH] CVE-2023-34162: Version update determination vulnerability in the user profile module.Successful exploitation of thi Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.

CVE-2022-48500 [HIGH] CWE-404 CVE-2022-48500: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48499 [HIGH] CWE-404 CVE-2022-48499: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48498 [HIGH] CWE-770 CVE-2022-48498: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48492 [HIGH] CWE-1188 CVE-2022-48492: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48489 [HIGH] CWE-404 CVE-2022-48489: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48487 [HIGH] CVE-2022-48487: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48490 [HIGH] CWE-120 CVE-2022-48490: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48497 [HIGH] CWE-120 CVE-2022-48497: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48486 [HIGH] CWE-787 CVE-2022-48486: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48501 [HIGH] CWE-120 CVE-2022-48501: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48493 [HIGH] CWE-1188 CVE-2022-48493: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-41586 [HIGH] CWE-130 CVE-2022-41586: The communication framework module has a vulnerability of not truncating data properly.Successful ex The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2023-26549 [HIGH] CWE-233 CVE-2023-26549: The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successf The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality.

CVE-2024-32989 [HIGH] CWE-20 CVE-2024-32989: Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful explo Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-34161 [HIGH] CWE-863 CVE-2023-34161: nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of t nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2022-48516 [HIGH] CWE-200 CVE-2022-48516: Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Succe Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality.

CVE-2022-41599 [HIGH] CVE-2022-41599: The system service has a vulnerability that causes incorrect return values. Successful exploitation The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-46328 [HIGH] CWE-20 CVE-2022-46328: Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerabil Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.