Huawei Emui vulnerabilities

CVE-2023-39408 [HIGH] CWE-120 CVE-2023-39408: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the sys DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CVE-2023-39395 [HIGH] CWE-19 CVE-2023-39395: Mismatch vulnerability in the serialization process in the communication system. Successful exploita Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

CVE-2023-39381 [HIGH] CWE-20 CVE-2023-39381: Input verification vulnerability in the storage module. Successful exploitation of this vulnerabili Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.

CVE-2023-39397 [HIGH] CWE-476 CVE-2023-39397: Input parameter verification vulnerability in the communication system. Successful exploitation of t Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.

CVE-2022-41583 [HIGH] CWE-125 CVE-2022-41583: The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successfu The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.

CVE-2022-48500 [HIGH] CWE-404 CVE-2022-48500: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48499 [HIGH] CWE-404 CVE-2022-48499: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48498 [HIGH] CWE-770 CVE-2022-48498: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48492 [HIGH] CWE-1188 CVE-2022-48492: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48489 [HIGH] CWE-404 CVE-2022-48489: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48487 [HIGH] CVE-2022-48487: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48490 [HIGH] CWE-120 CVE-2022-48490: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2023-34162 [HIGH] CVE-2023-34162: Version update determination vulnerability in the user profile module.Successful exploitation of thi Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.

CVE-2022-48497 [HIGH] CWE-120 CVE-2022-48497: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48486 [HIGH] CWE-787 CVE-2022-48486: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48501 [HIGH] CWE-120 CVE-2022-48501: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48493 [HIGH] CWE-1188 CVE-2022-48493: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will aff Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-47976 [HIGH] CWE-287 CVE-2022-47976: The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control con The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.

CVE-2022-46328 [HIGH] CWE-20 CVE-2022-46328: Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerabil Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2024-32989 [HIGH] CWE-20 CVE-2024-32989: Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful explo Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.