Huawei Magic Ui vulnerabilities

CVE-2021-36988 [HIGH] CVE-2021-36988: There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnera There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

CVE-2021-36999 [HIGH] CWE-120 CVE-2021-36999: There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulner There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to open the images may cause remote code execution.

CVE-2021-22472 [HIGH] CVE-2021-22472: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-36991 [HIGH] CVE-2021-36991: There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path i There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.

CVE-2021-22488 [HIGH] CWE-59 CVE-2021-22488: There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of t There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.

CVE-2021-36995 [HIGH] CVE-2021-36995: There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of t There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.

CVE-2021-37001 [HIGH] CVE-2021-37001: There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified.

CVE-2021-22405 [HIGH] CVE-2021-22405: There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-36993 [HIGH] CWE-401 CVE-2021-36993: There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabi There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-22485 [HIGH] CVE-2021-22485: There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitati There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-36992 [HIGH] CVE-2021-36992: There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of thi There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22401 [HIGH] CVE-2021-22401: There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

CVE-2021-22486 [HIGH] CVE-2021-22486: There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22406 [HIGH] CWE-755 CVE-2021-22406: There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly.

CVE-2021-36996 [MEDIUM] CVE-2021-36996: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information.

CVE-2021-36987 [MEDIUM] CWE-362 CVE-2021-36987: There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone d There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause the system to restart.

CVE-2021-36997 [MEDIUM] CVE-2021-36997: There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Su There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerability may cause the Gallery or Files app to exit unexpectedly.

CVE-2021-36998 [MEDIUM] CVE-2021-36998: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds.

CVE-2021-22482 [MEDIUM] CWE-909 CVE-2021-22482: There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of thi There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data.

CVE-2021-22475 [MEDIUM] CWE-276 CVE-2021-22475: There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitatio There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.