EM
Product
EMUI
831
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 148High 352Medium 0Low 0
Watch
Add EMUI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-48492 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48490 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48489 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48487 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48486 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2023-31227 | 7.5 | May 26 | The hwPartsDFR module has a vulnerability in API calling verification Affected: 13.0.0 |
| CVE-2023-31226 | 7.5 | May 26 | The SDK for the MediaPlaybackController module has improper permission verification Affected: 13.0.0 |
| CVE-2023-0116 | 7.5 | May 26 | The reminder module lacks an authentication mechanism for broadcasts received Affected: 12.0; 12.0.1; 13.0.0 |
| CVE-2022-48480 | 7.5 | May 26 | Integer overflow vulnerability in some phones Affected: 10.1.0; 10.1.1; 11.0.0 |
| CVE-2021-46886 | 7.5 | May 26 | The video framework has memory overwriting caused by addition overflow Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0; 12.0.1 |
| CVE-2021-46885 | 7.5 | May 26 | The video framework has memory overwriting caused by addition overflow Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0; 12.0.1 |
| CVE-2021-46884 | 7.5 | May 26 | The video framework has memory overwriting caused by addition overflow Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0; 12.0.1 |
| CVE-2021-46883 | 7.5 | May 26 | The video framework has memory overwriting caused by addition overflow Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0; 12.0.1 |
| CVE-2021-46882 | 7.5 | May 26 | The video framework has memory overwriting caused by addition overflow Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0; 12.0.1 |
| CVE-2021-46881 | 7.5 | May 26 | The video framework has memory overwriting caused by addition overflow Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0; 12.0.1 |
| CVE-2023-1696 | 7.5 | May 20 | The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-1694 | 7.5 | May 20 | The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality Affected: 11.0.1; 13.0.0 |
| CVE-2023-1693 | 7.5 | May 20 | The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality Affected: 11.0.1; 13.0.0 |
| CVE-2023-1692 | 7.5 | May 20 | The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-26549 | 7.5 | Mar 27 | The SystemUI module has a vulnerability of repeated app restart due to improper parameters Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-26548 | 7.5 | Mar 27 | The pgmng module has a vulnerability in serialization/deserialization Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48360 | 7.5 | Mar 27 | The facial recognition module has a vulnerability in file permission control Affected: 12.0.0; 13.0.0 |
| CVE-2022-48359 | 7.5 | Mar 27 | The recovery mode for updates has a vulnerability that causes arbitrary disk modification Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48357 | 7.5 | Mar 27 | Some products have the double fetch vulnerability Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48356 | 7.5 | Mar 27 | The facial recognition module has a vulnerability in input parameter verification Affected: 12.0.0 |
| CVE-2022-48352 | 7.5 | Mar 27 | Some smartphones have data initialization issues Affected: 12.0.0; 13.0.0 |
| CVE-2022-48351 | 7.5 | Mar 27 | The secure OS module has configuration defects Affected: 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48350 | 7.5 | Mar 27 | The HUAWEI Messaging app has a vulnerability of unauthorized file access Affected: 13.0.0 |
| CVE-2022-48347 | 7.5 | Mar 27 | The MediaProvider module has a vulnerability in permission verification Affected: 13.0.0 |
| CVE-2022-48346 | 7.5 | Mar 27 | The HwContacts module has a logic bypass vulnerability Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48302 | 7.5 | Feb 9 | The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48301 | 7.5 | Feb 9 | The bundle management module lacks permission verification in some APIs Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48300 | 7.5 | Feb 9 | The WMS module lacks the authentication mechanism in some APIs Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48299 | 7.5 | Feb 9 | The WMS module lacks the authentication mechanism in some APIs Affected: 12.0.1 |
| CVE-2022-48298 | 7.5 | Feb 9 | The geofencing kernel code does not verify the length of the input data Affected: 12.0.1 |
| CVE-2022-48297 | 7.5 | Feb 9 | The geofencing kernel code has a vulnerability of not verifying the length of the input data Affected: 12.0.1 |
| CVE-2022-48295 | 7.5 | Feb 9 | The IHwAntiMalPlugin interface lacks permission verification Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48294 | 7.5 | Feb 9 | The IHwAttestationService interface has a defect in authentication Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48289 | 7.5 | Feb 9 | The bundle management module lacks authentication and control mechanisms in some APIs Affected: 12.0.1 |
| CVE-2022-48288 | 7.5 | Feb 9 | The bundle management module lacks authentication and control mechanisms in some APIs Affected: 12.0.1 |
| CVE-2022-48287 | 7.5 | Feb 9 | The HwContacts module has a logic bypass vulnerability Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48286 | 7.5 | Feb 9 | The multi-screen collaboration module has a privilege escalation vulnerability Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-47976 | 7.5 | Jan 6 | The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal… Affected: 12.0.0 |
| CVE-2022-47975 | 7.5 | Jan 6 | The DUBAI module has a double free vulnerability Affected: 12.0.0 |
| CVE-2022-46762 | 7.5 | Jan 6 | The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality Affected: 12.0.0 |
| CVE-2022-46761 | 7.5 | Jan 6 | The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2021-46868 | 7.5 | Jan 6 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access Affected: 12.0.0 |
| CVE-2021-46867 | 7.5 | Jan 6 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access Affected: 12.0.0 |
| CVE-2022-46328 | 7.5 | Dec 20 | Some smartphones have the input validation vulnerability Affected: 12.0.0 |
| CVE-2022-46322 | 7.5 | Dec 20 | Some smartphones have the out-of-bounds write vulnerability Affected: 12.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
