Huawei Magic Ui vulnerabilities

CVE-2021-22482 [MEDIUM] CWE-909 CVE-2021-22482: There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of thi There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data.

CVE-2021-22325 [MEDIUM] CWE-319 CVE-2021-22325: There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of th There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in video streams being intercepted during transmission.

CVE-2021-37039 [MEDIUM] CWE-20 CVE-2021-37039: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vu There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.

CVE-2020-9148 [MEDIUM] CVE-2020-9148: An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages.

CVE-2020-9149 [MEDIUM] CVE-2020-9149: An application error verification vulnerability exists in a component interface of Huawei Smartphone An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to modify and delete user SMS messages.

CVE-2021-37103 [MEDIUM] CWE-276 CVE-2021-37103: There is an improper permission management vulnerability in the Wallet apps. Successful exploitation There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-40045 [MEDIUM] CWE-347 CVE-2021-40045: There is a vulnerability of signature verification mechanism failure in system upgrade through recov There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-40037 [MEDIUM] CWE-843 CVE-2021-40037: There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the M There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

CVE-2022-31755 [MEDIUM] CWE-281 CVE-2022-31755: The communication module has a vulnerability of improper permission preservation. Successful exploit The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.

CVE-2020-9146 [MEDIUM] CWE-772 CVE-2020-9146: A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local atta A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakage and doS attacks by carefully constructing attack scenarios.

CVE-2022-31758 [MEDIUM] CWE-362 CVE-2022-31758: The kernel module has the race condition vulnerability. Successful exploitation of this vulnerabilit The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-31751 [MEDIUM] CVE-2022-31751: The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability m The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-31759 [MEDIUM] CWE-824 CVE-2022-31759: AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vul AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-40015 [MEDIUM] CWE-362 CVE-2021-40015: There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful expl There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

CVE-2021-36994 [LOW] CWE-362 CVE-2021-36994: There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Sma There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.

CVE-2021-22308 [LOW] CVE-2021-22308: There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.