Huawei Emui vulnerabilities

CVE-2025-58276 [MEDIUM] CWE-264 CVE-2025-58276: Permission verification vulnerability in the home screen module Impact: Successful exploitation of t Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49309 [MEDIUM] CWE-264 CVE-2026-49309: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vul Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-31758 [MEDIUM] CWE-362 CVE-2022-31758: The kernel module has the race condition vulnerability. Successful exploitation of this vulnerabilit The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2023-52544 [MEDIUM] CWE-22 CVE-2023-52544: Vulnerability of file path verification being bypassed in the email module. Impact: Successful explo Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-31751 [MEDIUM] CVE-2022-31751: The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability m The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.

CVE-2024-32995 [MEDIUM] CWE-248 CVE-2024-32995: Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vuln Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2022-31759 [MEDIUM] CWE-824 CVE-2022-31759: AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vul AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.

CVE-2024-54101 [MEDIUM] CWE-20 CVE-2024-54101: Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-54629 [MEDIUM] CWE-362 CVE-2025-54629: Race condition issue occurring in the physical page import process of the memory management module. Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2026-41977 [MEDIUM] CWE-190 CVE-2026-41977: DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affe DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2022-44548 [MEDIUM] CWE-276 CVE-2022-44548: There is a vulnerability in permission verification during the Bluetooth pairing process. Successful There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

CVE-2021-40015 [MEDIUM] CWE-362 CVE-2021-40015: There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful expl There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

CVE-2021-40006 [MEDIUM] CWE-254 CVE-2021-40006: Vulnerability of design defects in the security algorithm component. Successful exploitation of this Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.

CVE-2025-54632 [MEDIUM] CWE-120 CVE-2025-54632: Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploit Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVE-2023-44110 [MEDIUM] CWE-20 CVE-2023-44110: Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.

CVE-2024-32997 [MEDIUM] CWE-362 CVE-2024-32997: Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vul Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2025-54646 [MEDIUM] CWE-130 CVE-2025-54646: Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation o Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance.

CVE-2025-53177 [LOW] CWE-264 CVE-2025-53177: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of th Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

CVE-2026-41974 [LOW] CWE-264 CVE-2026-41974: Permission control vulnerability in service notifications. Impact: Successful exploitation of this v Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2023-52720 [MEDIUM] CWE-362 CVE-2023-52720: Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vuln Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.