Huawei Emui vulnerabilities

CVE-2023-41306 [LOW] CWE-362 CVE-2023-41306: Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful e Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.

CVE-2021-36994 [LOW] CWE-362 CVE-2021-36994: There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Sma There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.

CVE-2023-52371 [LOW] CWE-476 CVE-2023-52371: Vulnerability of null references in the motor module.Successful exploitation of this vulnerability m Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.

CVE-2022-41597 [LOW] CWE-125 CVE-2022-41597: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41598 [LOW] CWE-125 CVE-2022-41598: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41595 [LOW] CWE-125 CVE-2022-41595: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41592 [LOW] CWE-125 CVE-2022-41592: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41600 [LOW] CWE-125 CVE-2022-41600: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41601 [LOW] CWE-125 CVE-2022-41601: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41603 [LOW] CWE-125 CVE-2022-41603: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41602 [LOW] CWE-125 CVE-2022-41602: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41593 [LOW] CWE-125 CVE-2022-41593: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41594 [LOW] CWE-125 CVE-2022-41594: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2021-22308 [LOW] CVE-2021-22308: There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.

CVE-2024-5464 [LOW] CWE-200 CVE-2024-5464: Vulnerability of insufficient permission verification in the NearLink module Impact: Successful expl Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-31225 [LOW] CWE-362 CVE-2023-31225: The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability.

CVE-2023-41310 [LOW] CWE-400 CVE-2023-41310: Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerab Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.