EMUI vulnerabilities
185 known vulnerabilities in EMUI from Huawei. 185 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Permission control vulnerability in the event notification management module.
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
Vulnerability of improper permission control in the theme setting module.
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
HarmonyOS: Out-of-bounds Read
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.5 High severity
HarmonyOS: Incorrect Access of Indexable Resource
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful…
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.8 Critical severity
HarmonyOS: Use After Free
Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 9.1 Critical severity
HarmonyOS: Out-of-bounds Read
Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
HarmonyOS: Improper Control of Generation of Code
Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability.
- 7.5 High severity
HarmonyOS: Incorrect Default Permissions
Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
Vulnerability of native APIs not being implemented in the NFC service module Impact…
Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
HarmonyOS: Incorrect Default Permissions
Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
HarmonyOS: Improper Authentication
Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 9.1 Critical severity
HarmonyOS: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
Vulnerability of improper access control in the secure input module Impact: Successful…
Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- 7.5 High severity
HarmonyOS: Incorrect Authorization
Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
Access permission verification vulnerability in the input method framework module Impact…
Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
- 9.1 Critical severity
HarmonyOS: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- 7.5 High severity
HarmonyOS: Exposure of Sensitive Information to an Unauthorized Actor
Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact…
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.
- 7.8 High severity
HarmonyOS: Improper Authentication
Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
- 7.5 High severity
HarmonyOS: Improper Authorization
Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.8 High severity
HarmonyOS: Missing Authorization
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.
- 7.1 High severity
HarmonyOS: Improper Access Control
Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 7.5 High severity
Access permission verification vulnerability in the Settings module.
Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
HarmonyOS: Deserialization of Untrusted Data
Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.1 High severity
HarmonyOS: Use After Free
Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.
- 7.5 High severity
Permission verification vulnerability in the system sharing pop-up module Impact: Successful…
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
- 7.5 High severity
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful…
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
- 7.5 High severity
HarmonyOS: Buffer Copy without Checking Size of Input
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Buffer Copy without Checking Size of Input
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Insufficient Verification of Data Authenticity
Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Missing Authorization
Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.5 High severity
HarmonyOS: Improper Authorization
Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.1 Critical severity
HarmonyOS: Improper Verification of Cryptographic Signature
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.
- 7.5 High severity
HarmonyOS: Improper Handling of Insufficient Permissions or Privileges
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.