Huawei Magic Ui vulnerabilities

CVE-2021-22335 [HIGH] CWE-787 CVE-2021-22335: There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exp There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause exceptions in image processing.

CVE-2020-9147 [HIGH] CWE-125 CVE-2020-9147: A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local atta A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully constructing attack scenarios to cause out-of-bounds read.

CVE-2021-40052 [HIGH] CWE-131 CVE-2021-40052: There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploi There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.

CVE-2021-40048 [HIGH] CWE-131 CVE-2021-40048: There is an incorrect buffer size calculation vulnerability in the video framework. Successful explo There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.

CVE-2021-40056 [HIGH] CWE-120 CVE-2021-40056: There is a vulnerability of copying input buffer without checking its size in the video framework. S There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-40062 [HIGH] CWE-120 CVE-2021-40062: There is a vulnerability of copying input buffer without checking its size in the video framework. S There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.

CVE-2021-39998 [HIGH] CVE-2021-39998: There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExServi There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

CVE-2021-39973 [HIGH] CWE-476 CVE-2021-39973: There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

CVE-2021-22405 [HIGH] CVE-2021-22405: There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2021-22350 [HIGH] CWE-416 CVE-2021-22350: There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exp There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause the device to crash and restart.

CVE-2021-22349 [HIGH] CWE-20 CVE-2021-22349: There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insuff There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart.

CVE-2021-22391 [HIGH] CWE-131 CVE-2021-22391: There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of thi There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-37027 [HIGH] CVE-2021-37027: There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affec There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.

CVE-2021-22489 [HIGH] CVE-2021-22489: There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affec There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability.

CVE-2021-37035 [HIGH] CVE-2021-37035: There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly.

CVE-2021-37031 [HIGH] CVE-2021-37031: There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly.

CVE-2021-37047 [HIGH] CWE-20 CVE-2021-37047: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.

CVE-2021-37030 [HIGH] CWE-276 CVE-2021-37030: There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this v There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

CVE-2022-37004 [HIGH] CVE-2022-37004: The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successf The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability.

CVE-2022-37007 [HIGH] CWE-125 CVE-2022-37007: The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnera The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.