Huawei Emui vulnerabilities

CVE-2022-29793 [HIGH] CVE-2022-29793: There is a configuration defect in the activation lock of mobile phones.Successful exploitation of t There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.

CVE-2021-40035 [HIGH] CWE-120 CVE-2021-40035: There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file m There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

CVE-2021-40029 [HIGH] CWE-120 CVE-2021-40029: There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file m There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

CVE-2021-40011 [HIGH] CWE-400 CVE-2021-40011: There is an uncontrolled resource consumption vulnerability in the display module. Successful exploi There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.

CVE-2021-22317 [HIGH] CVE-2021-22317: There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of th There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.

CVE-2021-37097 [HIGH] CWE-94 CVE-2021-37097: There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.

CVE-2021-46787 [HIGH] CVE-2021-46787: The AMS module has a vulnerability of improper permission control.Successful exploitation of this vu The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.

CVE-2021-22401 [HIGH] CVE-2021-22401: There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

CVE-2021-22447 [HIGH] CWE-754 CVE-2021-22447: There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone. There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-39974 [HIGH] CWE-125 CVE-2021-39974: There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affe There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37052 [HIGH] CWE-755 CVE-2021-37052: There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage.

CVE-2021-22415 [HIGH] CWE-131 CVE-2021-22415: There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful explo There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause kernel exceptions with the code.

CVE-2020-9158 [HIGH] CVE-2020-9158: There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr.

CVE-2021-22374 [HIGH] CWE-129 CVE-2021-22374: There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploi There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks.

CVE-2021-40020 [HIGH] CWE-125 CVE-2021-40020: There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Su There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-34735 [HIGH] CWE-476 CVE-2022-34735: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2022-34736 [HIGH] CWE-476 CVE-2022-34736: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2022-34743 [HIGH] CWE-125 CVE-2022-34743: The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-29790 [HIGH] CVE-2022-29790: The graphics acceleration service has a vulnerability in multi-thread access to the database.Success The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.

CVE-2022-29795 [HIGH] CWE-476 CVE-2022-29795: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.