Huawei Emui vulnerabilities

CVE-2022-41596 [HIGH] CWE-502 CVE-2022-41596: The system tool has inconsistent serialization and deserialization. Successful exploitation of this The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.

CVE-2023-34161 [HIGH] CWE-863 CVE-2023-34161: nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of t nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-1695 [HIGH] CWE-755 CVE-2023-1695: Vulnerability of failures to capture exceptions in the communication framework. Successful exploitat Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-1691 [HIGH] CWE-248 CVE-2023-1691: Vulnerability of failures to capture exceptions in the communication framework. Successful exploitat Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.

CVE-2023-44119 [HIGH] CWE-667 CVE-2023-44119: Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vu Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.

CVE-2022-48507 [HIGH] CWE-294 CVE-2022-48507: Vulnerability of identity verification being bypassed in the storage module. Successful exploitation Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-52552 [HIGH] CWE-20 CVE-2023-52552: Input verification vulnerability in the power module. Impact: Successful exploitation of this vulner Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52108 [HIGH] CVE-2023-52108: Vulnerability of process priorities being raised in the ActivityManagerService module. Successful ex Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.

CVE-2024-32990 [HIGH] CWE-20 CVE-2024-32990: Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploit Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52537 [HIGH] CWE-280 CVE-2023-52537: Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful ex Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2022-41588 [HIGH] CWE-1264 CVE-2022-41588: The home screen module has a vulnerability in service logic processing.Successful exploitation of th The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.

CVE-2023-52359 [HIGH] CWE-285 CVE-2023-52359: Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impa Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52716 [HIGH] CWE-269 CVE-2023-52716: Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. I Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-52362 [HIGH] CWE-276 CVE-2023-52362: Permission management vulnerability in the lock screen module.Successful exploitation of this vulner Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.

CVE-2021-37050 [HIGH] CWE-311 CVE-2021-37050: There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitat There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22442 [HIGH] CWE-354 CVE-2021-22442: There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successf There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2022-48295 [HIGH] CWE-281 CVE-2022-48295: The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulner The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications).

CVE-2022-48301 [HIGH] CWE-281 CVE-2022-48301: The bundle management module lacks permission verification in some APIs. Successful exploitation of The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled.

CVE-2021-37069 [HIGH] CWE-362 CVE-2021-37069: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

CVE-2023-52357 [HIGH] CWE-502 CVE-2023-52357: Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploi Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.