Huawei Emui vulnerabilities

CVE-2024-32995 [MEDIUM] CWE-248 CVE-2024-32995: Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vuln Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2022-31759 [MEDIUM] CWE-824 CVE-2022-31759: AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vul AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.

CVE-2024-54101 [MEDIUM] CWE-20 CVE-2024-54101: Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2026-41977 [MEDIUM] CWE-190 CVE-2026-41977: DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affe DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-54632 [MEDIUM] CWE-120 CVE-2025-54632: Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploit Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2023-44110 [MEDIUM] CWE-20 CVE-2023-44110: Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.

CVE-2021-40015 [MEDIUM] CWE-362 CVE-2021-40015: There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful expl There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

CVE-2021-40006 [MEDIUM] CWE-254 CVE-2021-40006: Vulnerability of design defects in the security algorithm component. Successful exploitation of this Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.

CVE-2022-44548 [MEDIUM] CWE-276 CVE-2022-44548: There is a vulnerability in permission verification during the Bluetooth pairing process. Successful There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

CVE-2025-54646 [MEDIUM] CWE-130 CVE-2025-54646: Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation o Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance.

CVE-2024-32997 [MEDIUM] CWE-362 CVE-2024-32997: Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vul Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-53177 [LOW] CWE-264 CVE-2025-53177: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of th Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

CVE-2026-41974 [LOW] CWE-264 CVE-2026-41974: Permission control vulnerability in service notifications. Impact: Successful exploitation of this v Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52720 [MEDIUM] CWE-362 CVE-2023-52720: Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vuln Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-41306 [LOW] CWE-362 CVE-2023-41306: Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful e Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.

CVE-2021-36994 [LOW] CWE-362 CVE-2021-36994: There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Sma There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.

CVE-2023-52371 [LOW] CWE-476 CVE-2023-52371: Vulnerability of null references in the motor module.Successful exploitation of this vulnerability m Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.

CVE-2022-41598 [LOW] CWE-125 CVE-2022-41598: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41595 [LOW] CWE-125 CVE-2022-41595: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41597 [LOW] CWE-125 CVE-2022-41597: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.