Huawei Emui vulnerabilities

CVE-2021-22426 [CRITICAL] CWE-119 CVE-2021-22426: There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerabilit There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

CVE-2021-22433 [CRITICAL] CWE-119 CVE-2021-22433: There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerabilit There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

CVE-2021-22388 [CRITICAL] CWE-190 CVE-2021-22388: There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vuln There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.

CVE-2021-22345 [CRITICAL] CWE-787 CVE-2021-22345: There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this v There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds memory write.

CVE-2021-22474 [CRITICAL] CWE-125 CVE-2021-22474: There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnera There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.

CVE-2023-49241 [HIGH] CVE-2023-49241: API permission control vulnerability in the network management module. Successful exploitation of th API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-48294 [HIGH] CWE-287 CVE-2022-48294: The IHwAttestationService interface has a defect in authentication. Successful exploitation of this The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2023-52541 [HIGH] CWE-862 CVE-2023-52541: Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-39009 [CRITICAL] CWE-287 CVE-2022-39009: The WLAN module has a vulnerability in permission verification. Successful exploitation of this vuln The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functions.

CVE-2022-38999 [CRITICAL] CVE-2022-38999: The AOD module has the improper update of reference count vulnerability. Successful exploitation of The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability.

CVE-2022-48511 [CRITICAL] CWE-843 CVE-2022-48511: Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successf Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally.

CVE-2024-42039 [HIGH] CWE-285 CVE-2024-42039: Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerab Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-37002 [CRITICAL] CWE-269 CVE-2022-37002: The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulner The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.

CVE-2020-9145 [CRITICAL] CWE-787 CVE-2020-9145: There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability may cause out-of-bounds access to the physical memory.

CVE-2020-9142 [CRITICAL] CWE-787 CVE-2020-9142: There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file.

CVE-2021-22435 [CRITICAL] CVE-2021-22435: There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this v There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability.

CVE-2021-22343 [CRITICAL] CVE-2021-22343: There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service integrity and availability.

CVE-2023-3455 [CRITICAL] CWE-200 CVE-2023-3455: Key management vulnerability on system. Successful exploitation of this vulnerability may affect ser Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity.

CVE-2022-48348 [CRITICAL] CWE-200 CVE-2022-48348: The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of t The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity.

CVE-2023-44118 [CRITICAL] CWE-284 CVE-2023-44118: Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnera Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality.