MU
Product
Magic UI
276
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 64High 164Medium 46Low 2
Watch
Add Magic UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34742 | 7.5 | Jul 12 | The system module has a read/write vulnerability Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-34739 | 7.5 | Jul 12 | The fingerprint module has a vulnerability of overflow in arithmetic addition Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-34738 | 7.5 | Jul 12 | The SystemUI module has a vulnerability in permission control Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-46741 | 7.5 | Jul 12 | The basic framework and setting module have defects, which were introduced during the design Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40012 | 7.5 | Jul 12 | Vulnerability of pointers being incorrectly used during data transmission in the video framework Affected: 4.0.0 |
| CVE-2022-31761 | 7.5 | Jun 13 | Configuration defects in the secure OS module Affected: 3.1.1; 4.0.0 |
| CVE-2022-31757 | 7.5 | Jun 13 | The setting module has a vulnerability of improper use of APIs Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-31754 | 7.5 | Jun 13 | Logical defects in code implementation in some products Affected: 3.1.0 |
| CVE-2022-31753 | 7.5 | Jun 13 | The voice wakeup module has a vulnerability of using externally-controlled format strings Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-46813 | 7.5 | Jun 13 | Vulnerability of residual files not being deleted after an update in the ChinaDRM module Affected: 4.0.0 |
| CVE-2021-46814 | 7.5 | Jun 13 | The video framework has an out-of-bounds memory read/write vulnerability Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-22252 | 7.5 | May 13 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-29793 | 7.5 | May 13 | There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability Affected: 3.1.0; 3.1.1 |
| CVE-2021-46789 | 7.5 | May 13 | Configuration defects in the secure OS module Affected: 3.0.0; 3.1.0; 3.1.1 |
| CVE-2021-46788 | 7.5 | May 13 | Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead… Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-46787 | 7.5 | May 13 | The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-22257 | 7.5 | Apr 11 | The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-22256 | 7.5 | Apr 11 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-22254 | 7.5 | Apr 11 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-22253 | 7.5 | Apr 11 | The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40065 | 7.5 | Apr 11 | The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiality Affected: 4.0.0 |
| CVE-2021-40064 | 7.5 | Mar 10 | There is a heap-based buffer overflow vulnerability in system components Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40063 | 7.5 | Mar 10 | There is an improper access control vulnerability in the video module Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40062 | 7.5 | Mar 10 | There is a vulnerability of copying input buffer without checking its size in the video framework Affected: 3.1.0; 3.1.1 |
| CVE-2021-40061 | 7.5 | Mar 10 | There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40060 | 7.5 | Mar 10 | There is a heap-based buffer overflow vulnerability in the video framework Affected: 3.1.0; 3.1.1 |
| CVE-2021-40058 | 7.5 | Mar 10 | There is a heap-based buffer overflow vulnerability in the video framework Affected: 3.1.0; 3.1.1 |
| CVE-2021-40057 | 7.5 | Mar 10 | There is a heap-based and stack-based buffer overflow vulnerability in the video framework Affected: 3.0.0; 3.1.0 |
| CVE-2021-40056 | 7.5 | Mar 10 | There is a vulnerability of copying input buffer without checking its size in the video framework Affected: 3.1.0; 3.1.1 |
| CVE-2021-40054 | 7.5 | Mar 10 | There is an integer underflow vulnerability in the atcmdserver module Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40052 | 7.5 | Mar 10 | There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability Affected: 4.0.0 |
| CVE-2021-40051 | 7.5 | Mar 10 | There is an unauthorized access vulnerability in system components Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40049 | 7.5 | Mar 10 | There is a permission control vulnerability in the PMS module Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40048 | 7.5 | Mar 10 | There is an incorrect buffer size calculation vulnerability in the video framework Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40047 | 7.5 | Mar 10 | There is a vulnerability of memory not being released after effective lifetime in the Bastet module Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-37027 | 7.5 | Feb 25 | There is a DoS vulnerability in smartphones Affected: 2.1.1; 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-22489 | 7.5 | Feb 25 | There is a DoS vulnerability in smartphones Affected: 2.1.1; 3.0.0; 3.1.0 |
| CVE-2021-22395 | 7.5 | Feb 25 | There is a code injection vulnerability in smartphones Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-22319 | 7.5 | Feb 25 | There is an improper verification vulnerability in smartphones Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40039 | 7.5 | Jan 10 | There is a Null pointer dereference vulnerability in the camera module in smartphones Affected: 4.0.0 |
| CVE-2021-40038 | 7.5 | Jan 10 | There is a Double free vulnerability in the AOD module in smartphones Affected: 4.0.0 |
| CVE-2021-40035 | 7.5 | Jan 10 | There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40031 | 7.5 | Jan 10 | There is a Null pointer dereference vulnerability in the camera module in smartphones Affected: 4.0.0 |
| CVE-2021-40029 | 7.5 | Jan 10 | There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40026 | 7.5 | Jan 10 | There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones Affected: 4.0.0 |
| CVE-2021-40020 | 7.5 | Jan 10 | There is an Out-of-bounds array read vulnerability in the security storage module in smartphones Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40011 | 7.5 | Jan 10 | There is an uncontrolled resource consumption vulnerability in the display module Affected: 2.1.1; 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-39998 | 7.5 | Jan 10 | There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones Affected: 4.0.0 |
| CVE-2021-39974 | 7.5 | Jan 3 | There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality Affected: 3.1.0 |
| CVE-2021-39973 | 7.5 | Jan 3 | There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down Affected: 4.0.0 |
