Total
398 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-39011 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module. | |||||
CVE-2022-41581 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 9.1 CRITICAL |
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | |||||
CVE-2022-41582 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability. | |||||
CVE-2022-41583 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module. | |||||
CVE-2022-41584 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.8 HIGH |
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. | |||||
CVE-2022-41585 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.8 HIGH |
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. | |||||
CVE-2022-41586 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality. | |||||
CVE-2022-41588 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. | |||||
CVE-2022-41589 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability. | |||||
CVE-2022-38998 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality. | |||||
CVE-2022-38986 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 9.1 CRITICAL |
The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability. | |||||
CVE-2022-38977 | 1 Huawei | 1 Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data. | |||||
CVE-2022-38985 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. | |||||
CVE-2022-38984 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality. | |||||
CVE-2021-46839 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 9.1 CRITICAL |
The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | |||||
CVE-2022-41578 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 9.8 CRITICAL |
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information. | |||||
CVE-2022-41580 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 9.8 CRITICAL |
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. | |||||
CVE-2022-38983 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-18 | N/A | 9.8 CRITICAL |
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. | |||||
CVE-2022-38981 | 1 Huawei | 1 Harmonyos | 2022-10-18 | N/A | 7.5 HIGH |
The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. | |||||
CVE-2022-41603 | 1 Huawei | 2 Emui, Harmonyos | 2022-10-14 | N/A | 3.4 LOW |
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. |