Huawei Emui vulnerabilities

CVE-2023-39393 [HIGH] CWE-200 CVE-2023-39393: Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten.

CVE-2023-39392 [HIGH] CWE-16 CVE-2023-39392: Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnera Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

CVE-2025-54628 [HIGH] CWE-118 CVE-2025-54628: Vulnerability of incomplete verification information in the communication module. Impact: Successful Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2024-45441 [HIGH] CWE-20 CVE-2024-45441: Input verification vulnerability in the system service module Impact: Successful exploitation of thi Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-45442 [HIGH] CWE-264 CVE-2024-45442: Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Success Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-54098 [HIGH] CWE-840 CVE-2024-54098: Service logic error vulnerability in the system service module Impact: Successful exploitation of th Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2023-52553 [HIGH] CWE-362 CVE-2023-52553: Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerabil Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2021-22335 [HIGH] CWE-787 CVE-2021-22335: There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exp There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause exceptions in image processing.

CVE-2021-37109 [HIGH] CVE-2021-37109: There is a security protection bypass vulnerability with the modem.Successful exploitation of this v There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure.

CVE-2020-9147 [HIGH] CWE-125 CVE-2020-9147: A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local atta A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully constructing attack scenarios to cause out-of-bounds read.

CVE-2022-41585 [HIGH] CWE-125 CVE-2022-41585: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2022-41584 [HIGH] CWE-125 CVE-2022-41584: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2021-40052 [HIGH] CWE-131 CVE-2021-40052: There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploi There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.

CVE-2021-40048 [HIGH] CWE-131 CVE-2021-40048: There is an incorrect buffer size calculation vulnerability in the video framework. Successful explo There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.

CVE-2021-40056 [HIGH] CWE-120 CVE-2021-40056: There is a vulnerability of copying input buffer without checking its size in the video framework. S There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-40062 [HIGH] CWE-120 CVE-2021-40062: There is a vulnerability of copying input buffer without checking its size in the video framework. S There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-22405 [HIGH] CVE-2021-22405: There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2022-34735 [HIGH] CWE-476 CVE-2022-34735: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2022-34736 [HIGH] CWE-476 CVE-2022-34736: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2021-39998 [HIGH] CVE-2021-39998: There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExServi There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.