Magic UI vulnerabilities
9 known vulnerabilities in Magic UI from Huawei. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
EMUI: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components.
- 7.5 High severity
HarmonyOS: Insufficient Verification of Data Authenticity
The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.
- 9.8 Critical severity
HarmonyOS: Incorrect Default Permissions
The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files.
- 9.8 Critical severity
HarmonyOS: Improper Privilege Management
The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.
- 7.5 High severity
HarmonyOS: Out-of-bounds Read
The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.
- 9.1 Critical severity
HarmonyOS: Incorrect Default Permissions
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
- 7.5 High severity
HarmonyOS: Use of Externally-Controlled Format String
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.
- 7.5 High severity
HarmonyOS: Improper Privilege Management
The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
- 7.5 High severity
HarmonyOS: Improper Validation of Integrity Check Value
The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.