Huawei Magic Ui vulnerabilities

CVE-2021-22401 [HIGH] CVE-2021-22401: There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

CVE-2021-22447 [HIGH] CWE-754 CVE-2021-22447: There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone. There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-39974 [HIGH] CWE-125 CVE-2021-39974: There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affe There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37052 [HIGH] CWE-755 CVE-2021-37052: There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnera There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage.

CVE-2021-22415 [HIGH] CWE-131 CVE-2021-22415: There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful explo There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause kernel exceptions with the code.

CVE-2020-9158 [HIGH] CVE-2020-9158: There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr.

CVE-2021-22374 [HIGH] CWE-129 CVE-2021-22374: There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploi There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks.

CVE-2021-40020 [HIGH] CWE-125 CVE-2021-40020: There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Su There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2022-34743 [HIGH] CWE-125 CVE-2022-34743: The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-40054 [HIGH] CWE-191 CVE-2021-40054: There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of th There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.

CVE-2022-31753 [HIGH] CWE-134 CVE-2022-31753: The voice wakeup module has a vulnerability of using externally-controlled format strings. Successfu The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-31754 [HIGH] CVE-2022-31754: Logical defects in code implementation in some products. Successful exploitation of this vulnerabili Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features.

CVE-2021-36988 [HIGH] CVE-2021-36988: There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnera There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

CVE-2021-46788 [HIGH] CVE-2021-46788: Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of t Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.

CVE-2022-38987 [HIGH] CVE-2022-38987: The secure OS module has configuration defects. Successful exploitation of this vulnerability may af The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-38993 [HIGH] CVE-2022-38993: The secure OS module has configuration defects. Successful exploitation of this vulnerability may af The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-38990 [HIGH] CVE-2022-38990: The secure OS module has configuration defects. Successful exploitation of this vulnerability may af The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-38989 [HIGH] CVE-2022-38989: The secure OS module has configuration defects. Successful exploitation of this vulnerability may af The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.

CVE-2021-22442 [HIGH] CWE-354 CVE-2021-22442: There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successf There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

CVE-2021-37050 [HIGH] CWE-311 CVE-2021-37050: There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitat There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.