CVE-2021-22308
First published: Thu Jun 03 2021(Updated: )
There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMUI 5.0 | =10.0.0 | |
| EMUI 5.0 | =10.1.0 | |
| EMUI 5.0 | =10.1.1 | |
| EMUI 5.0 | =11.0.0 | |
| Magic UI | =3.0.0 | |
| Magic UI | =3.1.0 | |
| Magic UI | =3.1.1 | |
| Magic UI | =4.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-22308?
The severity of CVE-2021-22308 is categorized as moderate due to the potential for personal information leakage.
How do I fix CVE-2021-22308?
To fix CVE-2021-22308, users should update their Huawei devices to the latest available software version provided by Huawei.
What devices are affected by CVE-2021-22308?
CVE-2021-22308 affects Huawei devices running EMUI versions 10.0.0, 10.1.0, 10.1.1, 11.0.0 and Magic UI versions 3.0.0, 3.1.0, 3.1.1, and 4.0.0.
What exploits are associated with CVE-2021-22308?
CVE-2021-22308 can be exploited by malicious apps that are already installed on the device to take unauthorized screenshots.
What is the potential impact of CVE-2021-22308?
The potential impact of CVE-2021-22308 includes the risk of sensitive personal information being exposed without the user's consent.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/emui 5.0
- version/emui 5.0/10.0.0
- version/emui 5.0/10.1.0
- version/emui 5.0/10.1.1
- version/emui 5.0/11.0.0
- canonical/magic ui
- version/magic ui/3.0.0
- version/magic ui/3.1.0
- version/magic ui/3.1.1
- version/magic ui/4.0.0