Huawei Magic Ui vulnerabilities

CVE-2021-22407 [MEDIUM] CVE-2021-22407: There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22404 [MEDIUM] CWE-22 CVE-2021-22404: There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vu There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-22490 [MEDIUM] CWE-287 CVE-2021-22490: There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of thi There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device performance.

CVE-2021-36994 [LOW] CWE-362 CVE-2021-36994: There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Sma There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.

CVE-2021-22386 [HIGH] CWE-415 CVE-2021-22386: A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit th A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.

CVE-2021-22385 [HIGH] CWE-668 CVE-2021-22385: A component of the Huawei smartphone has a External Control of System or Configuration Setting vulne A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.

CVE-2021-22435 [CRITICAL] CVE-2021-22435: There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this v There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability.

CVE-2021-22444 [CRITICAL] CWE-20 CVE-2021-22444: There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.

CVE-2021-22389 [CRITICAL] CWE-863 CVE-2021-22389: There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vul There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.

CVE-2021-22387 [CRITICAL] CWE-913 CVE-2021-22387: There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartpho There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to remotely execute commands.

CVE-2021-22388 [CRITICAL] CWE-190 CVE-2021-22388: There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vuln There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.

CVE-2021-22438 [CRITICAL] CWE-787 CVE-2021-22438: There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful expl There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed.

CVE-2021-22390 [CRITICAL] CWE-416 CVE-2021-22390: There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful expl There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.

CVE-2021-22392 [HIGH] CWE-131 CVE-2021-22392: There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of thi There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and directions to abnormal addresses.

CVE-2021-22445 [HIGH] CWE-20 CVE-2021-22445: There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-22384 [HIGH] CWE-362 CVE-2021-22384: There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of thi There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.

CVE-2021-22446 [HIGH] CVE-2021-22446: There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of thi There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-22428 [HIGH] CWE-362 CVE-2021-22428: There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.

CVE-2021-22413 [HIGH] CWE-190 CVE-2021-22413: There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vuln There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-22443 [HIGH] CWE-20 CVE-2021-22443: There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random address access.