CVE-2023-52363

CVE-2023-52363 describes a defect introduced in the design process in the Control Panel module with potential to cause app processes to start by mistake. Public sources reference Huawei HarmonyOS/EMUI context and generic design-phase vulnerability impact. The available documents do not provide co...

CVE-2023-52369

CVE-2023-52369 is a stack overflow vulnerability in the NFC module with a reported impact on availability and integrity. NVD records a CVSS v3.1 base score of 9.1 (CRITICAL) with network access, low complexity, no privileges required, and no user interaction, affecting the NFC-related component a...

CVE-2023-52365

Huawei EMUI and HarmonyOS are affected by an out-of-bounds read vulnerability within the smart activity recognition module . This flaw, also characterized as a buffer copy without checking input size, can be exploited by an attacker to cause a denial of service or cause features to perform abnorm...

CVE-2023-52387

The CVE-2023-52387 entry describes a Resource Reuse vulnerability in the GPU module that can affect confidentiality. Connected CNVD/CNNVD and related records map this issue to Huawei EMUI and Huawei HarmonyOS (mobile OSes) with a resource reuse flaw in the GPU component. The NVD/NVD-derived metri...

CVE-2023-52373

Summary of CVE-2023-52373 : A permission verification flaw in the Huawei HarmonyOS/EMUI share box module's content sharing pop-up allows unauthorized file sharing. The vulnerability is described across multiple sources (NVD, Red Hat CVE page, CNVD/CNNVD entries) with a high impact on confidential...

CVE-2023-52375

CVE-2023-52375 concerns Huawei HarmonyOS/EMUI’s WMS (WindowManagerService) module. Connected sources describe a privilege control vulnerability in the WMS, which can affect usability and, per the NVD entry, may impact availability. The CVE’s description notes a permission control issue in WindowM...

CVE-2023-52371

A null pointer exception vulnerability exists in Huawei HarmonyOS and EMUI . The flaw originates from null references within the motor module , which can be exploited by an attacker to cause a usability impact or affect the availability of the system. No specific remediation or exploit links are ...

CVE-2023-52377

A security vulnerability exists in Huawei EMUI , an Android-based mobile operating system. The flaw stems from input data not being verified within the cellular data module , which could lead to out-of-bounds access if successfully exploited. While the vulnerability is confirmed, the specific aff...

CVE-2023-52374

A privilege control vulnerability exists in the package management module of Huawei HarmonyOS and Huawei EMUI . This flaw allows an attacker to exploit incorrect authorization to compromise service confidentiality . While the specific root cause and versions are not detailed in the provided docum...

CVE-2023-52358

A configuration flaw exists in the audio module of Huawei HarmonyOS and Huawei EMUI (a user interface based on the Android operating system). Exploitation of this vulnerability by an attacker can result in a denial of service (DoS), affecting the availability of the affected systems. No specific ...

CVE-2023-52097

A vulnerability exists in Huawei EMUI and Huawei HarmonyOS within the NMS module that allows an attacker to bypass foreground service restrictions . Successful exploitation of this flaw can compromise system confidentiality . No specific patch versions or workarounds are currently provided in the...

CVE-2023-52381

A script injection vulnerability exists in the Huawei HarmonyOS and EMUI mail modules. An attacker can exploit this flaw to execute arbitrary code on the system, potentially impacting the confidentiality, integrity, and availability of services. No specific exploit links or patch versions are pro...

CVE-2023-52380

An improper access control vulnerability exists in the mail module of Huawei HarmonyOS and EMUI . An attacker could exploit this flaw to obtain sensitive information , potentially affecting service confidentiality . No specific affected versions, root causes, or remediation details are provided i...

CVE-2023-52378

CVE-2023-52378 relates to Huawei HarmonyOS/EMUI WMS (WindowManagerServices) with an incorrect service logic root cause in the WMS module. The connected CNVD/CNNVD entries describe a privilege control type vulnerability and a business logic error that can lead to usability issues or functional exc...

CVE-2023-52368

A denial of service vulnerability exists in Huawei HarmonyOS and Huawei EMUI due to an input validation flaw in the Accounts module . An attacker can exploit this vulnerability to cause system functions to operate abnormally. No specific exploit links or remediation versions are provided in the d...

CVE-2023-52372

A denial of service vulnerability exists in Huawei HarmonyOS and EMUI due to improper input parameter validation within the motor module . An attacker could exploit this flaw to negatively affect the availability of the affected systems. Exploitation details or specific patch versions are not pro...

CVE-2023-52362

A privilege management vulnerability exists in the lock screen module of Huawei HarmonyOS and EMUI . Exploitation of this flaw can compromise the usability and availability of the affected systems. Exploitation details are not provided in the documents.

CVE-2023-52376

Huawei HarmonyOS and EMUI are affected by an information disclosure vulnerability in the Gallery module . An attacker can exploit this flaw to obtain sensitive information , potentially impacting service confidentiality. This vulnerability is associated with CWE-212 (Improper Removal of Sensitive...

CVE-2023-52366

Huawei EMUI , an Android-based mobile operating system, is affected by an out-of-bounds read vulnerability in the Intelligent State Recognition (or smart activity recognition) module. The root cause is identified as a buffer copy without checking the size of the input (CWE-120). Successful exploi...

CVE-2023-52370

A stack overflow vulnerability exists in the network acceleration module of Huawei EMUI , an Android-based mobile operating system. The flaw is caused by a buffer copy operation that does not properly check the size of the input. Successful exploitation of this vulnerability may result in unautho...

CVE-2023-52360

Huawei HarmonyOS EMUI version 12.0.0 is affected by a logic vulnerability within the baseband . Successful exploitation of this flaw may result in compromised system integrity . While the specific root cause mechanism is not detailed beyond the logic flaw description, the vulnerability is associa...

CVE-2023-41301

CVE-2023-41301 describes a vulnerability in the PMS module enabling unauthorized API access, with exploitation potentially causing features to behave abnormally. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH), with network attack vector, no privileges required, no user interaction, and ...

CVE-2023-39394

CVE-2023-39394 describes an API privilege-escalation vulnerability in Huawei HarmonyOS’s wifienhance module. According to the NVD entry, successful exploitation could allow modification of the ARP list, implying impact to ARP cache integrity (high with I:H, network attack vector, no user interact...

CVE-2023-39390

CVE-2023-39390 affects Huawei HarmonyOS, specifically the window management module. The vulnerability arises from input parameter verification weaknesses in certain APIs, which, if exploited over the network, could cause the device to restart (CVSS 7.5, HIGH; AV:N, AC:L, PR:N, UI:N, S:U, C:N, I:N...

CVE-2023-39404

CVE-2023-39404 concerns Huawei HarmonyOS and is tied to the window management module. The vulnerability stems from insufficient input parameter verification in certain APIs, which can be exploited to cause a device reboot (DoS). Public exploitation details are not provided in the supplied documen...

CVE-2023-37238

The CVE-2023-37238 entry concerns Huawei HarmonyOS. Affected component: wireless projection module (and related screen casting interfaces). Root cause: incomplete verification of apps’ permission to access a specific API, enabling insufficient permission checks. Impact: exploitation could affect ...

CVE-2023-37241

CVE-2023-37241 is an input verification vulnerability in the WMS API. Exploitation could cause the affected device to restart. The available connected sources confirm the issue and its impact but do not provide concrete exploit details, affected versions, or a validated fix/update. No remediation...

CVE-2023-52367

Huawei EMUI and Huawei HarmonyOS are affected by an improper access control vulnerability within the media library module . An attacker could exploit this flaw to negatively impact system availability and integrity . Specific technical details regarding the root cause or exploit vectors are not p...

CVE-2022-31757

Technical details, affected products, and remediation are not publicly provided in the supplied documents. Monitor updates from Red Hat, NVD, and other sources for concrete impact and fixes.

CVE-2022-48312

The CVE-2022-48312 entry concerns the HwPCAssistant module in Huawei/HarmonyOS, described as an out-of-bounds read/write vulnerability that may compromise confidentiality and integrity. The connected records identify the affected component (HwPCAssistant) and the underlying issue (out-of-bounds a...

CVE-2022-22253

CVE-2022-22253 affects Huawei HarmonyOS’s DFX module , where an vulnerability stems from improper validation of integrity check values . This can lead to system instability if exploitable. Connected sources (Red Hat, NVD, CNVD, etc.) reiterate the same description without detailing a specific pat...

CVE-2022-22256

CVE-2022-22256 affects Huawei HarmonyOS, specifically the DFX module, which has an access control error. The vulnerability arises from inadequate restriction of resources to unauthorized roles, with potential impact on data confidentiality. Public references in the dataset describe the issue cons...

CVE-2021-40044

CVE-2021-40044 involves a permission verification vulnerability in the Bluetooth module, with Huawei EMUI as the affected context. The underlying issue is in the Bluetooth permission check, enabling unauthorized operations if exploited. NVD lists CVSSv3.1 base score 8.8 (HIGH) with adjacent attac...

CVE-2021-40054

CVE-2021-40054 corresponds to an integer underflow in the atcmdserver module reported in Huawei Emui and Magic UI environments (atcmdserver). The vulnerability affects integrity and has a high severity in CVSS terms (network vector, low attack complexity, no privileges required, no user interacti...

CVE-2024-42030

CVE-2024-42030 describes an access privilege verification vulnerability in Huawei HarmonyOS/EMUI’s Content Sharing Popup module. The issue is that an attacker could exploit a flawed privilege check to compromise service confidentiality with local access (no user interaction required; CVSS v3.1: A...

CVE-2021-40045

CVE-2021-40045 concerns Huawei HarmonyOS (Wearables recovery upgrade system) where the signature verification mechanism can fail during system upgrade in recovery mode. The underlying vulnerability is a signature verification failure that can affect confidentiality of service. The NVD entry notes...

CVE-2023-52379

A privilege control vulnerability exists in the calendar storage module of Huawei HarmonyOS and EMUI . An attacker could exploit this flaw to compromise service confidentiality . No specific exploit information or remediation details are provided in the documents.

CVE-2021-37115

Huawei EMUI (Android-based) is affected by CVE-2021-37115 due to an unauthorized rewrite vulnerability in the ACPU memory access management module. Exploitation may lead to information disclosure (confidentiality) of sensitive data. The available documents do not specify affected versions, root c...

CVE-2021-22434

CVE-2021-22434 is described as a memory address out-of-bounds vulnerability in smartphones that can enable malicious code execution. Public records reference Huawei HarmonyOS and Huawei bulletin updates as mitigation, indicating the issue affected HarmonyOS-based devices and was addressed in vend...

CVE-2022-22261

CVE-2022-22261 concerns Huawei HarmonyOS HiAIserver. Multiple connected sources confirm a vulnerability where the system fails to strictly validate the weights used in a model, allowing exploitation that can cause AI service anomalies or denial of service. The issue is described as a weight-valid...

CVE-2021-22432

CVE-2021-22432 affects Huawei HarmonyOS smartphones where a vulnerability in permission isolation can lead to out-of-bounds access. Connected sources cite a Huawei HarmonyOS buffer error vulnerability in some products; however, detailed affected versions, vulnerable component specifics, exploit i...

CVE-2021-39986

CVE-2021-39986 is associated with Huawei EMUI (EMUI 12.0.0) and a memory access management module on the ACPU, where an unauthorized rewrite vulnerability can affect service confidentiality. CNVD-2022-12802 documents EMUI 12.0.0 as affected. The CVSSv3.1 vector indicates a local, low-effort attac...

CVE-2021-37107

CVE-2021-37107 concerns Huawei EMUI/Magic UI with a misconfigured ACPU memory access permissions, leading to potential out-of-bounds access. Affected product family appears to be Huawei EMUI-based Android devices; root cause is improper memory access permission configuration on ACPU. The CVE entr...

CVE-2021-40055

CVE-2021-40055 describes a man-in-the-middle attack vulnerability during system update download in recovery mode that can compromise integrity. Connected records corroborate this as a MITM issue affecting Huawei EMUI and Magic UI (Android-based). The NVD details indicate impact to integrity (I) a...

CVE-2021-40061

CVE-2021-40061 : Type confusion in the Bastet module causes resource access via an incompatible type, with reported impact to integrity. Connected documents confirm the vulnerability name and general root cause but do not provide concrete exploit vectors, affected versions, or remediation steps. ...

CVE-2023-52357

Huawei HarmonyOS and Huawei EMUI contain a denial-of-service vulnerability in the vibration framework caused by a serialization/deserialization mismatch. The CNVD/CNNVD entries describe an availability impact, with exploitation likely local to the device. The NVD entry reiterates a serialization/...

CVE-2023-41293

Huawei HarmonyOS DDMP 모듈에서 데이터 보안 분류 계층의 취약점이 보고되었습니다. CVE-2023-41293은 DDMP 모듈의 접근 제어 부재로 인해 원격에서 악용될 수 있으며, 확인된 영향은 기밀성의 손상입니다. NVD 메트릭에 따르면 이 취약점의 공격 벡터는 네트워크이며, 공격의 복잡도는 낮고, 필요 권한은 없음, 사용자 상호작용도 필요하지 않습니다. 기밀성에 높은 영향이 확인되지만, 문서에 제시된 구체적 악용 코드나 실전 공격 정보는 제공되지 않습니다. 패치 버전이나 구체적 수정안은 명시적으로 제시되어 있...

CVE-2021-22394

CVE-2021-22394 concerns a buffer overflow in HarmonyOS smartphones that may cause DoS of apps during Multi-Screen Collaboration. The Connected documents corroborate a buffer-overflow issue affecting smartphones, but do not provide concrete patched versions, vulnerable component details, exploit s...

CVE-2021-40047

The CVE-2021-40047 entry relates to Huawei EMUI and Magic UI Bastet modules, where a memory is not released after its effective lifetime. The vulnerability affects the Bastet component and may impact integrity if exploited. Exploitation details, affected versions, and a remediation/patch are not ...

CVE-2021-40052

The connected CNVD-2022-20292 and CNNVD-202203-984 entries indicate Huawei EMUI and Magic UI are affected by an incorrect buffer size calculation vulnerability in the video framework, described as impacting usability. No specific affected versions are provided in these documents. A PT-2022-11173 ...