CVE-2021-22333: Out-of-bounds Read
First published: Thu Jun 03 2021(Updated: )
There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei EMUI | =9.1.0 | |
| Huawei EMUI | =9.1.1 | |
| Huawei EMUI | =10.0.0 | |
| Huawei EMUI | =10.1.0 | |
| Huawei EMUI | =10.1.1 | |
| Huawei EMUI | =11.0.0 | |
| Huawei Magic UI | =2.1.1 | |
| Huawei Magic UI | =3.0.0 | |
| Huawei Magic UI | =3.1.0 | |
| Huawei Magic UI | =3.1.1 | |
| Huawei Magic UI | =4.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-22333?
The severity of CVE-2021-22333 is classified as critical due to the potential for code execution and system permission escalation.
How do I fix CVE-2021-22333?
To fix CVE-2021-22333, update your Huawei device to the latest software version that addresses this vulnerability.
What devices are affected by CVE-2021-22333?
CVE-2021-22333 affects specific Huawei devices running EMUI versions 9.1.0, 9.1.1, and 10.0.0, 10.1.0, 10.1.1, 11.0.0, as well as Magic UI versions 2.1.1, 3.0.0, 3.1.0, 3.1.1, and 4.0.0.
What happens if CVE-2021-22333 is exploited?
Exploitation of CVE-2021-22333 may allow attackers to execute arbitrary code and obtain unauthorized access to system permissions.
When was CVE-2021-22333 disclosed?
CVE-2021-22333 was disclosed in April 2021 as part of Huawei's security bulletin updates.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei emui
- version/huawei emui/9.1.0
- version/huawei emui/9.1.1
- version/huawei emui/10.0.0
- version/huawei emui/10.1.0
- version/huawei emui/10.1.1
- version/huawei emui/11.0.0
- canonical/huawei magic ui
- version/huawei magic ui/2.1.1
- version/huawei magic ui/3.0.0
- version/huawei magic ui/3.1.0
- version/huawei magic ui/3.1.1
- version/huawei magic ui/4.0.0