MU
Product
Magic UI
276
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 64High 164Medium 46Low 2
Watch
Add Magic UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40044 | 8.8 | Feb 9 | There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-37074 | 8.1 | Dec 8 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation Affected: 3.1.1; 4.0.0 |
| CVE-2021-22428 | 8.1 | Aug 2 | There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass Affected: 4.0.0 |
| CVE-2021-22427 | 8.1 | Aug 2 | There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass Affected: 4.0.0 |
| CVE-2021-22384 | 8.1 | Aug 2 | There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass Affected: 4.0.0 |
| CVE-2021-22351 | 8.1 | Jun 30 | There is a Credentials Management Errors Vulnerability in Huawei Smartphone Affected: 3.1.1; 4.0.0 |
| CVE-2021-22369 | 8.1 | Jun 30 | There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone Affected: 3.1.1; 4.0.0 |
| CVE-2022-31762 | 7.8 | Jun 13 | The AMS module has a vulnerability in input validation Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-36999 | 7.8 | Oct 28 | There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to open the images may… Affected: 3.1.1; 4.0.0 |
| CVE-2021-22385 | 7.8 | Aug 10 | A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-22352 | 7.8 | Jun 30 | There is a Configuration Defect Vulnerability in Huawei Smartphone Affected: 3.1.1; 4.0.0 |
| CVE-2021-22335 | 7.8 | Jun 3 | There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone Affected: 2.1.1; 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2020-9147 | 7.8 | Apr 1 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-39005 | 7.5 | Sep 16 | The MPTCP module has the memory leak vulnerability Affected: 4.0.0 |
| CVE-2022-39004 | 7.5 | Sep 16 | The MPTCP module has the memory leak vulnerability Affected: 4.0.0 |
| CVE-2022-39001 | 7.5 | Sep 16 | The number identification module has a path traversal vulnerability Affected: 4.0.0 |
| CVE-2022-38997 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-38993 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38992 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38991 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38990 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38989 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38988 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38987 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1 |
| CVE-2022-38979 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-38978 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2020-36601 | 7.5 | Sep 16 | Out-of-bounds write vulnerability in the kernel modules Affected: 3.1.0 |
| CVE-2020-36600 | 7.5 | Sep 16 | Out-of-bounds write vulnerability in the power consumption module Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40040 | 7.5 | Aug 9 | Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40030 | 7.5 | Aug 9 | The My HUAWEI app has a defect in the design Affected: 4.0.0; 3.1.1; 3.1.0 |
| CVE-2022-37005 | 7.5 | Aug 9 | The Settings application has an argument injection vulnerability Affected: 4.0.0; 3.1.1 |
| CVE-2022-37004 | 7.5 | Aug 9 | The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE) Affected: 4.0.0; 3.1.1; 3.1.0; 3.0.0 |
| CVE-2022-37008 | 7.5 | Aug 9 | The recovery module has a vulnerability of bypassing the verification of an update package before use Affected: 4.0.0 |
| CVE-2022-37007 | 7.5 | Aug 9 | The chinadrm module has an out-of-bounds read vulnerability Affected: 4.0.0 |
| CVE-2021-40034 | 7.5 | Aug 9 | The video framework has the memory overwriting vulnerability caused by addition overflow Affected: 4.0.0; 3.1.1; 3.1.0 |
| CVE-2022-34743 | 7.5 | Jul 12 | The AT commands of the USB port have an out-of-bounds read vulnerability Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-34742 | 7.5 | Jul 12 | The system module has a read/write vulnerability Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-34739 | 7.5 | Jul 12 | The fingerprint module has a vulnerability of overflow in arithmetic addition Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-34738 | 7.5 | Jul 12 | The SystemUI module has a vulnerability in permission control Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-46741 | 7.5 | Jul 12 | The basic framework and setting module have defects, which were introduced during the design Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-40012 | 7.5 | Jul 12 | Vulnerability of pointers being incorrectly used during data transmission in the video framework Affected: 4.0.0 |
| CVE-2022-31761 | 7.5 | Jun 13 | Configuration defects in the secure OS module Affected: 3.1.1; 4.0.0 |
| CVE-2022-31757 | 7.5 | Jun 13 | The setting module has a vulnerability of improper use of APIs Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-31754 | 7.5 | Jun 13 | Logical defects in code implementation in some products Affected: 3.1.0 |
| CVE-2022-31753 | 7.5 | Jun 13 | The voice wakeup module has a vulnerability of using externally-controlled format strings Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2021-46813 | 7.5 | Jun 13 | Vulnerability of residual files not being deleted after an update in the ChinaDRM module Affected: 4.0.0 |
| CVE-2021-46814 | 7.5 | Jun 13 | The video framework has an out-of-bounds memory read/write vulnerability Affected: 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-22252 | 7.5 | May 13 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability Affected: 3.0.0; 3.1.0; 3.1.1; 4.0.0 |
| CVE-2022-29793 | 7.5 | May 13 | There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability Affected: 3.1.0; 3.1.1 |
| CVE-2021-46789 | 7.5 | May 13 | Configuration defects in the secure OS module Affected: 3.0.0; 3.1.0; 3.1.1 |
