Huawei Emui vulnerabilities

CVE-2023-52367 [HIGH] CWE-284 CVE-2023-52367: Vulnerability of improper access control in the media library module.Successful exploitation of this Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

CVE-2022-47975 [HIGH] CWE-415 CVE-2022-47975: The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-40047 [HIGH] CWE-401 CVE-2021-40047: There is a vulnerability of memory not being released after effective lifetime in the Bastet module. There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

CVE-2021-36988 [HIGH] CVE-2021-36988: There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnera There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

CVE-2021-37001 [HIGH] CVE-2021-37001: There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified.

CVE-2022-41582 [HIGH] CWE-15 CVE-2022-41582: The security module has configuration defects.Successful exploitation of this vulnerability may affe The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.

CVE-2021-46788 [HIGH] CVE-2021-46788: Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of t Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.

CVE-2023-41302 [HIGH] CWE-22 CVE-2023-41302: Redirection permission verification vulnerability in the home screen module. Successful exploitation Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2021-46836 [HIGH] CVE-2021-46836: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successfu Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2021-40024 [HIGH] CVE-2021-40024: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successfu Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2023-26548 [HIGH] CWE-502 CVE-2023-26548: The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of th The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability.

CVE-2023-46770 [HIGH] CWE-787 CVE-2023-46770: Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones.

CVE-2023-46774 [HIGH] CVE-2023-46774: Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerabilit Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.

CVE-2023-46765 [HIGH] CWE-754 CVE-2023-46765: Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerabilit Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.

CVE-2023-46768 [HIGH] CWE-416 CVE-2023-46768: Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may ca Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-39396 [HIGH] CWE-125 CVE-2023-39396: Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.

CVE-2022-48351 [HIGH] CWE-400 CVE-2022-48351: The secure OS module has configuration defects. Successful exploitation of this vulnerability may af The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.

CVE-2023-44108 [HIGH] CWE-843 CVE-2023-44108: Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerab Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

CVE-2023-41299 [HIGH] CWE-120 CVE-2023-41299: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the sys DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CVE-2023-39409 [HIGH] CWE-120 CVE-2023-39409: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the sys DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.