Huawei: >> Magic Ui >> 3.1.1 Security Vulnerabilities
There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-05-13
The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
CVSS Score
9.8
EPSS Score
0.002
Published
2022-05-13
The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-05-13
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-05-13
Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-05-13
The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-04-11
A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-04-11
The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-04-11
The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-04-11
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-11