Huawei Emui vulnerabilities

CVE-2021-37053 [HIGH] CVE-2021-37053: There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerab There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

CVE-2021-37092 [HIGH] CWE-459 CVE-2021-37092: There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

CVE-2021-22491 [HIGH] CWE-20 CVE-2021-22491: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2022-22252 [HIGH] CWE-416 CVE-2022-22252: The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect syst The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.

CVE-2022-48352 [HIGH] CWE-665 CVE-2022-48352: Some smartphones have data initialization issues. Successful exploitation of this vulnerability may Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.

CVE-2022-44546 [HIGH] CWE-459 CVE-2022-44546: The kernel module has the vulnerability that the mapping is not cleared after the memory is automati The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart.

CVE-2022-44547 [HIGH] CWE-416 CVE-2022-44547: The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability ma The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability.

CVE-2022-44552 [HIGH] CWE-404 CVE-2022-44552: The lock screen module has defects introduced in the design process. Successful exploitation of this The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-44550 [HIGH] CWE-416 CVE-2022-44550: The graphics display module has a UAF vulnerability when traversing graphic layers. Successful explo The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability.

CVE-2023-52098 [HIGH] CWE-400 CVE-2023-52098: Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerabili Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.

CVE-2022-46761 [HIGH] CWE-276 CVE-2022-46761: The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful e The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.

CVE-2022-37008 [HIGH] CWE-345 CVE-2022-37008: The recovery module has a vulnerability of bypassing the verification of an update package before us The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.

CVE-2023-52364 [MEDIUM] CWE-120 CVE-2023-52364: Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.

CVE-2022-22255 [HIGH] CVE-2022-22255: The application framework has a common DoS vulnerability.Successful exploitation of this vulnerabili The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.

CVE-2021-22487 [HIGH] CWE-125 CVE-2021-22487: There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this v There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability.

CVE-2021-37046 [HIGH] CWE-401 CVE-2021-37046: There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart due to memory exhaustion.

CVE-2021-22483 [HIGH] CVE-2021-22483: There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulner There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS.

CVE-2021-36993 [HIGH] CWE-401 CVE-2021-36993: There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabi There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2022-39005 [HIGH] CWE-401 CVE-2022-39005: The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability ca The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.

CVE-2022-39004 [HIGH] CWE-401 CVE-2022-39004: The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability ca The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.