Huawei Magic Ui

HwSEServiceAPP has a vulnerability in permission management

CVE-2021-46811 5.3 - Medium - June 13, 2022

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.

Incorrect Default Permissions

Vulnerability of residual files not being deleted after an update in the ChinaDRM module

CVE-2021-46813 7.5 - High - June 13, 2022

Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.

Improper Removal of Sensitive Information Before Storage or Transfer

The voice wakeup module has a vulnerability of using externally-controlled format strings

CVE-2022-31753 7.5 - High - June 13, 2022

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.

Use of Externally-Controlled Format String

The setting module has a vulnerability of improper use of APIs

CVE-2022-31757 7.5 - High - June 13, 2022

The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services

CVE-2022-31760 9.1 - Critical - June 13, 2022

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.

Configuration defects in the secure OS module

CVE-2021-46815 7.5 - High - June 13, 2022

Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.

Missing authorization vulnerability in the system components

CVE-2022-31752 5.5 - Medium - June 13, 2022

Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality.

AuthZ

Logical defects in code implementation in some products

CVE-2022-31754 7.5 - High - June 13, 2022

Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features.

Configuration defects in the secure OS module

CVE-2022-31761 7.5 - High - June 13, 2022

Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.

The kernel module has the race condition vulnerability

CVE-2022-31758 4.7 - Medium - June 13, 2022

The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

Race Condition

The video framework has an out-of-bounds memory read/write vulnerability

CVE-2021-46814 7.5 - High - June 13, 2022

The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.

Memory Corruption

The kernel emcom module has multi-thread contention

CVE-2022-31751 5.5 - Medium - June 13, 2022

The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.

The communication module has a vulnerability of improper permission preservation

CVE-2022-31755 5.5 - Medium - June 13, 2022

The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.

Improper Preservation of Permissions

The fingerprint sensor module has design defects

CVE-2022-31756 5.5 - Medium - June 13, 2022

The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.

AppLink has a vulnerability of accessing uninitialized pointers

CVE-2022-31759 5.5 - Medium - June 13, 2022

AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.

Access of Uninitialized Pointer

The AMS module has a vulnerability in input validation

CVE-2022-31762 7.8 - High - June 13, 2022

The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.

Improper Input Validation

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.

CVE-2022-22252 7.5 - High - May 13, 2022

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.

Dangling pointer

The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.

CVE-2021-46786 9.8 - Critical - May 13, 2022

The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.

Buffer Overflow

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.

CVE-2021-46787 7.5 - High - May 13, 2022

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.

Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.

CVE-2021-46788 7.5 - High - May 13, 2022

Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-22254 7.5 - High - April 11, 2022

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.

AuthZ

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-22256 7.5 - High - April 11, 2022

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

CVE-2022-22253 7.5 - High - April 11, 2022

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

Improper Validation of Integrity Check Value

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.

CVE-2022-22257 7.5 - High - April 11, 2022

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.

Improper Privilege Management

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may

CVE-2022-22258 9.8 - Critical - April 11, 2022

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.

The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.

CVE-2021-46742 9.1 - Critical - April 11, 2022

The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.

authentification

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2021-40065 7.5 - High - April 11, 2022

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

There is a heap-based and stack-based buffer overflow vulnerability in the video framework

CVE-2021-40057 7.5 - High - March 10, 2022

There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

Memory Corruption

There is a heap-based buffer overflow vulnerability in the video framework

CVE-2021-40058 7.5 - High - March 10, 2022

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

Memory Corruption

There is a permission control vulnerability in the Wi-Fi module

CVE-2021-40059 6.5 - Medium - March 10, 2022

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.

Incorrect Default Permissions

There is a heap-based buffer overflow vulnerability in the video framework

CVE-2021-40060 7.5 - High - March 10, 2022

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

Memory Corruption

There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module

CVE-2021-40061 7.5 - High - March 10, 2022

There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

Object Type Confusion

There is a vulnerability of copying input buffer without checking its size in the video framework

CVE-2021-40062 7.5 - High - March 10, 2022

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.

Classic Buffer Overflow

There is an improper access control vulnerability in the video module

CVE-2021-40063 7.5 - High - March 10, 2022

There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality.

There is a heap-based buffer overflow vulnerability in system components

CVE-2021-40064 7.5 - High - March 10, 2022

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability.

Memory Corruption

There is a vulnerability of memory not being released after effective lifetime in the Bastet module

CVE-2021-40047 7.5 - High - March 10, 2022

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

Memory Leak

There is an incorrect buffer size calculation vulnerability in the video framework

CVE-2021-40048 7.5 - High - March 10, 2022

There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.

Incorrect Calculation of Buffer Size

There is a permission control vulnerability in the PMS module

CVE-2021-40049 7.5 - High - March 10, 2022

There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.

Incorrect Default Permissions

There is an out-of-bounds read vulnerability in the IFAA module

CVE-2021-40050 9.8 - Critical - March 10, 2022

There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.

Out-of-bounds Read

There is an unauthorized access vulnerability in system components

CVE-2021-40051 7.5 - High - March 10, 2022

There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality.

Exposure of Resource to Wrong Sphere

There is a permission control vulnerability in the Nearby module

CVE-2021-40053 9.1 - Critical - March 10, 2022

There is a permission control vulnerability in the Nearby module. Successful exploitation of this vulnerability will affect availability and integrity.

Incorrect Default Permissions

There is an integer underflow vulnerability in the atcmdserver module

CVE-2021-40054 7.5 - High - March 10, 2022

There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.

Integer underflow

There is a man-in-the-middle attack vulnerability during system update download in recovery mode

CVE-2021-40055 5.9 - Medium - March 10, 2022

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.

There is a vulnerability of copying input buffer without checking its size in the video framework

CVE-2021-40056 7.5 - High - March 10, 2022

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.

Classic Buffer Overflow

There is a memory address out of bounds vulnerability in smartphones

CVE-2021-22434 9.8 - Critical - February 25, 2022

There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

Buffer Overflow

There is an improper permission management vulnerability in the Wallet apps

CVE-2021-37103 5.5 - Medium - February 25, 2022

There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality.

Incorrect Default Permissions

There is a DoS vulnerability in smartphones

CVE-2021-37027 7.5 - High - February 25, 2022

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.

There is a DoS vulnerability in smartphones

CVE-2021-22489 7.5 - High - February 25, 2022

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability.

There is an improper verification vulnerability in smartphones

CVE-2021-22448 9.1 - Critical - February 25, 2022

There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files.

AuthZ

There is a software integer overflow leading to a TOCTOU condition in smartphones

CVE-2021-22437 7 - High - February 25, 2022

There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access.

Integer Overflow or Wraparound

There is a memory address out of bounds in smartphones

CVE-2021-22433 9.8 - Critical - February 25, 2022

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

Buffer Overflow

There is a vulnerability when configuring permission isolation in smartphones

CVE-2021-22432 9.8 - Critical - February 25, 2022

There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

Buffer Overflow

There is a logic bypass vulnerability in smartphones

CVE-2021-22430 9.8 - Critical - February 25, 2022

There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection.

Code Injection

There is a memory address out of bounds in smartphones

CVE-2021-22429 9.8 - Critical - February 25, 2022

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

Buffer Overflow

There is a memory address out of bounds in smartphones

CVE-2021-22426 9.8 - Critical - February 25, 2022

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.

Buffer Overflow

There is a code injection vulnerability in smartphones

CVE-2021-22395 7.5 - High - February 25, 2022

There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

Code Injection

There is a buffer overflow vulnerability in smartphones

CVE-2021-22394 9.1 - Critical - February 25, 2022

There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaboration.

Classic Buffer Overflow

There is an improper verification vulnerability in smartphones

CVE-2021-22319 7.5 - High - February 25, 2022

There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows.

Integer Overflow or Wraparound

There is a vulnerability when configuring permission isolation in smartphones

CVE-2021-22431 9.8 - Critical - February 25, 2022

There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

Buffer Overflow

There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

CVE-2021-40015 4.7 - Medium - February 09, 2022

There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.

Race Condition

There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations.

CVE-2021-40044 8.8 - High - February 09, 2022

There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations.

AuthZ

There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-40045 5.5 - Medium - February 09, 2022

There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.

Improper Verification of Cryptographic Signature

There is a Null pointer dereference vulnerability in the camera module in smartphones

CVE-2021-40031 7.5 - High - January 10, 2022

There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

NULL Pointer Dereference

There is an Out-of-bounds array read vulnerability in the security storage module in smartphones

CVE-2021-40020 7.5 - High - January 10, 2022

There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

Out-of-bounds Read

There is an uncontrolled resource consumption vulnerability in the display module

CVE-2021-40011 7.5 - High - January 10, 2022

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.

Resource Exhaustion

There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones

CVE-2021-39998 7.5 - High - January 10, 2022

There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones

CVE-2021-39996 9.8 - Critical - January 10, 2022

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow.

Memory Corruption

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones

CVE-2021-40029 7.5 - High - January 10, 2022

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

Classic Buffer Overflow

There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones

CVE-2021-40026 7.5 - High - January 10, 2022

There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

Memory Corruption

There is a Null pointer dereference vulnerability in the camera module in smartphones

CVE-2021-40039 7.5 - High - January 10, 2022

There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

NULL Pointer Dereference

There is a Double free vulnerability in the AOD module in smartphones

CVE-2021-40038 7.5 - High - January 10, 2022

There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

Double-free

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones

CVE-2021-40037 5.5 - Medium - January 10, 2022

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

Object Type Confusion

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones

CVE-2021-40035 7.5 - High - January 10, 2022

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

Classic Buffer Overflow

There is an Integer overflow vulnerability with ACPU in smartphones

CVE-2021-39993 9.8 - Critical - January 10, 2022

There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

Integer Overflow or Wraparound

There is an Out-of-bounds write vulnerability in the AOD module in smartphones

CVE-2021-40009 5.3 - Medium - January 10, 2022

There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

Memory Corruption

There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-39974 7.5 - High - January 03, 2022

There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Out-of-bounds Read

There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

CVE-2021-39973 7.5 - High - January 03, 2022

There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

NULL Pointer Dereference

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-39969 7.5 - High - January 03, 2022

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Exposure of Resource to Wrong Sphere

There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-39967 7.5 - High - January 03, 2022

There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Incorrect Default Permissions

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-39966 7.5 - High - January 03, 2022

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Missing Initialization of Resource

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37133 7.5 - High - January 03, 2022

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Exposure of Resource to Wrong Sphere

There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.

CVE-2021-37121 9.8 - Critical - January 03, 2022

There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.

Improper Privilege Management

There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.

CVE-2021-37120 9.8 - Critical - January 03, 2022

There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.

Double-free

There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37113 7.5 - High - January 03, 2022

There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Improper Privilege Management

There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37110 7.5 - High - January 03, 2022

There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.

CVE-2021-37111 7.5 - High - January 03, 2022

There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.

Allocation of Resources Without Limits or Throttling

There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37114 5.3 - Medium - January 03, 2022

There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Out-of-bounds Read

There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

CVE-2021-37117 7.5 - High - January 03, 2022

There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

CVE-2021-37119 7.5 - High - January 03, 2022

There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.

CVE-2021-37074 8.1 - High - December 08, 2021

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.

Race Condition

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.

CVE-2021-37097 7.5 - High - December 08, 2021

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.

Code Injection

There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.

CVE-2021-37093 5.3 - Medium - December 08, 2021

There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

CVE-2021-37092 7.5 - High - December 08, 2021

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

Insufficient Cleanup

There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37054 7.5 - High - December 08, 2021

There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

authentification

There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

CVE-2021-37053 7.5 - High - December 08, 2021

There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage.

CVE-2021-37052 7.5 - High - December 08, 2021

There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage.

Improper Handling of Exceptional Conditions

There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access.

CVE-2021-37051 9.1 - Critical - December 08, 2021

There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access.

Out-of-bounds Read

There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2021-37050 7.5 - High - December 08, 2021

There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Missing Encryption of Sensitive Data

There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.

CVE-2021-37075 7.5 - High - December 08, 2021

There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.

Insufficiently Protected Credentials

There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart.

CVE-2021-37037 7.5 - High - December 08, 2021

There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart.