Huawei Emui vulnerabilities

CVE-2022-41582 [HIGH] CWE-15 CVE-2022-41582: The security module has configuration defects.Successful exploitation of this vulnerability may affe The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.

CVE-2022-48351 [HIGH] CWE-400 CVE-2022-48351: The secure OS module has configuration defects. Successful exploitation of this vulnerability may af The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.

CVE-2023-41302 [HIGH] CWE-22 CVE-2023-41302: Redirection permission verification vulnerability in the home screen module. Successful exploitation Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2021-46836 [HIGH] CVE-2021-46836: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successfu Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2021-40024 [HIGH] CVE-2021-40024: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successfu Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2023-34164 [HIGH] CWE-476 CVE-2023-34164: Vulnerability of incomplete input parameter verification in the communication framework module. Succ Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability.

CVE-2023-1696 [HIGH] CWE-203 CVE-2023-1696: The multimedia video module has a vulnerability in data processing.Successful exploitation of this v The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.

CVE-2022-47976 [HIGH] CWE-287 CVE-2022-47976: The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control con The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.

CVE-2023-44108 [HIGH] CWE-843 CVE-2023-44108: Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerab Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

CVE-2022-41596 [HIGH] CWE-502 CVE-2022-41596: The system tool has inconsistent serialization and deserialization. Successful exploitation of this The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.

CVE-2023-52552 [HIGH] CWE-20 CVE-2023-52552: Input verification vulnerability in the power module. Impact: Successful exploitation of this vulner Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52366 [HIGH] CWE-120 CVE-2023-52366: Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-52108 [HIGH] CVE-2023-52108: Vulnerability of process priorities being raised in the ActivityManagerService module. Successful ex Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.

CVE-2023-39408 [HIGH] CWE-120 CVE-2023-39408: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the sys DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CVE-2023-39395 [HIGH] CWE-19 CVE-2023-39395: Mismatch vulnerability in the serialization process in the communication system. Successful exploita Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

CVE-2023-39381 [HIGH] CWE-20 CVE-2023-39381: Input verification vulnerability in the storage module. Successful exploitation of this vulnerabili Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.

CVE-2023-39397 [HIGH] CWE-476 CVE-2023-39397: Input parameter verification vulnerability in the communication system. Successful exploitation of t Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.

CVE-2023-41299 [HIGH] CWE-120 CVE-2023-41299: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the sys DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CVE-2023-39409 [HIGH] CWE-120 CVE-2023-39409: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the sys DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CVE-2022-41583 [HIGH] CWE-125 CVE-2022-41583: The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successfu The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.