Huawei Emui vulnerabilities

CVE-2022-41582 [HIGH] CWE-15 CVE-2022-41582: The security module has configuration defects.Successful exploitation of this vulnerability may affe The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.

CVE-2022-41583 [HIGH] CWE-125 CVE-2022-41583: The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successfu The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.

CVE-2022-39011 [HIGH] CWE-693 CVE-2022-39011: The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel spa The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module.

CVE-2022-41589 [HIGH] CWE-703 CVE-2022-41589: The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful e The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.

CVE-2022-38985 [HIGH] CWE-20 CVE-2022-38985: The facial recognition module has a vulnerability in input validation.Successful exploitation of thi The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-41576 [HIGH] CWE-94 CVE-2022-41576: The rphone module has a script that can be maliciously modified.Successful exploitation of this vuln The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices.

CVE-2022-41585 [HIGH] CWE-125 CVE-2022-41585: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2022-38998 [HIGH] CWE-125 CVE-2022-38998: The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Succes The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.

CVE-2022-41584 [HIGH] CWE-125 CVE-2022-41584: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2022-41577 [HIGH] CWE-125 CVE-2022-41577: The kernel server has a vulnerability of not verifying the length of the data transferred in the use The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability.

CVE-2022-41587 [MEDIUM] CWE-754 CVE-2022-41587: Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may a Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability.

CVE-2022-41598 [LOW] CWE-125 CVE-2022-41598: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41602 [LOW] CWE-125 CVE-2022-41602: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41595 [LOW] CWE-125 CVE-2022-41595: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41597 [LOW] CWE-125 CVE-2022-41597: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41592 [LOW] CWE-125 CVE-2022-41592: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41594 [LOW] CWE-125 CVE-2022-41594: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41601 [LOW] CWE-125 CVE-2022-41601: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41593 [LOW] CWE-125 CVE-2022-41593: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41600 [LOW] CWE-125 CVE-2022-41600: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.