Huawei Emui vulnerabilities

CVE-2025-68970 [MEDIUM] CWE-20 CVE-2025-68970: Permission verification bypass vulnerability in the media library module. Impact: Successful exploit Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-0117 [MEDIUM] CWE-287 CVE-2023-0117: The online authentication provided by the hwKitAssistant lacks strict identity verification of appli The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as MeeTime.

CVE-2022-48491 [MEDIUM] CWE-862 CVE-2022-48491: Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vul Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.

CVE-2021-40013 [MEDIUM] CVE-2021-40013: Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vu Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.

CVE-2022-48293 [MEDIUM] CWE-125 CVE-2022-48293: The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may aff The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-48292 [MEDIUM] CWE-125 CVE-2022-48292: The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulne The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-39006 [MEDIUM] CWE-362 CVE-2022-39006: The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.

CVE-2026-41973 [MEDIUM] CWE-840 CVE-2026-41973: Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-34855 [MEDIUM] CWE-20 CVE-2026-34855: Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vuln Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVE-2020-9138 [MEDIUM] CWE-787 CVE-2020-9138: There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exceptions during updating.

CVE-2023-52721 [MEDIUM] CWE-264 CVE-2023-52721: The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.

CVE-2023-52719 [MEDIUM] CWE-16 CVE-2023-52719: Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2020-9143 [MEDIUM] CWE-306 CVE-2020-9143: There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensitive information exposure.

CVE-2024-39671 [MEDIUM] CWE-840 CVE-2024-39671: Access control vulnerability in the security verification module. Impact: Successful exploitation of Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45444 [MEDIUM] CWE-20 CVE-2024-45444: Access permission verification vulnerability in the WMS module Impact: Successful exploitation of th Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-58043 [MEDIUM] CWE-840 CVE-2024-58043: Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnera Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45449 [MEDIUM] CWE-264 CVE-2024-45449: Access permission verification vulnerability in the ringtone setting module Impact: Successful explo Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-36500 [MEDIUM] CWE-269 CVE-2024-36500: Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-45447 [MEDIUM] CWE-200 CVE-2024-45447: Access control vulnerability in the camera framework module Impact: Successful exploitation of this Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-54643 [MEDIUM] CWE-125 CVE-2025-54643: Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light m Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.