Huawei Magic Ui vulnerabilities

CVE-2021-22387 [CRITICAL] CWE-913 CVE-2021-22387: There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartpho There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to remotely execute commands.

CVE-2020-9140 [CRITICAL] CWE-119 CVE-2020-9140: There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Un There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer overflow occurs.

CVE-2021-22403 [CRITICAL] CVE-2021-22403: There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitat There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands.

CVE-2021-37040 [CRITICAL] CWE-88 CVE-2021-37040: There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vu There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.

CVE-2021-22333 [CRITICAL] CWE-129 CVE-2021-22333: There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploi There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions.

CVE-2021-22432 [CRITICAL] CWE-119 CVE-2021-22432: There is a vulnerability when configuring permission isolation in smartphones. Successful exploitati There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

CVE-2021-22430 [CRITICAL] CVE-2021-22430: There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection.

CVE-2021-22367 [CRITICAL] CVE-2021-22367: There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass.

CVE-2021-22431 [CRITICAL] CWE-119 CVE-2021-22431: There is a vulnerability when configuring permission isolation in smartphones. Successful exploitati There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

CVE-2022-37003 [CRITICAL] CWE-276 CVE-2022-37003: The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnera The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files.

CVE-2021-22444 [CRITICAL] CWE-20 CVE-2021-22444: There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.

CVE-2021-22389 [CRITICAL] CWE-863 CVE-2021-22389: There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.

CVE-2020-9139 [CRITICAL] CWE-20 CVE-2020-9139: There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of t There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service.

CVE-2021-40010 [CRITICAL] CWE-787 CVE-2021-40010: The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.

CVE-2021-22323 [CRITICAL] CWE-190 CVE-2021-22323: There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vu There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permission to that of the root user.

CVE-2021-37045 [CRITICAL] CWE-416 CVE-2021-37045: There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.

CVE-2021-37120 [CRITICAL] CWE-415 CVE-2021-37120: There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.

CVE-2021-22348 [CRITICAL] CWE-416 CVE-2021-22348: There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exp There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute.

CVE-2021-22375 [CRITICAL] CVE-2021-22375: There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity.

CVE-2021-40053 [CRITICAL] CWE-276 CVE-2021-40053: There is a permission control vulnerability in the Nearby module.Successful exploitation of this vul There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.