Huawei Emui vulnerabilities

CVE-2024-42032 [MEDIUM] CWE-285 CVE-2024-42032: Access permission verification vulnerability in the Contacts module Impact: Successful exploitation Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-42037 [MEDIUM] CWE-248 CVE-2024-42037: Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-42034 [MEDIUM] CWE-840 CVE-2024-42034: LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerab LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-39672 [HIGH] CWE-416 CVE-2024-39672: Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vul Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.

CVE-2024-39673 [HIGH] CWE-502 CVE-2024-39673: Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exp Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-39670 [MEDIUM] CWE-264 CVE-2024-39670: Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploit Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-39671 [MEDIUM] CWE-840 CVE-2024-39671: Access control vulnerability in the security verification module. Impact: Successful exploitation of Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-39674 [MEDIUM] CWE-312 CVE-2024-39674: Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulner Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2023-7271 [MEDIUM] CWE-840 CVE-2023-7271: Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-36499 [MEDIUM] CWE-269 CVE-2024-36499: Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-36503 [MEDIUM] CWE-908 CVE-2024-36503: Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulner Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-5465 [MEDIUM] CWE-264 CVE-2024-5465: Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerabilit Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-36501 [MEDIUM] CWE-787 CVE-2024-36501: Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulne Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.

CVE-2024-36500 [MEDIUM] CWE-269 CVE-2024-36500: Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnera Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-36502 [MEDIUM] CWE-125 CVE-2024-36502: Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnera Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-5464 [LOW] CWE-200 CVE-2024-5464: Vulnerability of insufficient permission verification in the NearLink module Impact: Successful expl Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2024-32991 [CRITICAL] CWE-16 CVE-2024-32991: Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation o Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-32989 [HIGH] CWE-20 CVE-2024-32989: Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful explo Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-32992 [HIGH] CWE-20 CVE-2024-32992: Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of th Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-32990 [HIGH] CWE-20 CVE-2024-32990: Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploit Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.