First published: Mon Aug 02 2021(Updated: )
There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Emui | =9.1.0 | |
Huawei Emui | =9.1.1 | |
Huawei Emui | =10.0.0 | |
Huawei Emui | =10.1.0 | |
Huawei Emui | =10.1.1 | |
Huawei Emui | =11.0.0 | |
Huawei Magic Ui | =2.1.1 | |
Huawei Magic Ui | =3.0.0 | |
Huawei Magic Ui | =3.1.0 | |
Huawei Magic Ui | =3.1.1 | |
Huawei Magic Ui | =4.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-22442 has been classified with a medium severity due to the potential for system reset upon exploitation.
To mitigate CVE-2021-22442, it's recommended to update your Huawei smartphone to the latest version of EMUI or Magic UI that addresses this vulnerability.
CVE-2021-22442 affects Huawei devices running EMUI versions 9.1.0, 9.1.1, 10.0.0, 10.1.0, 10.1.1, and 11.0.0, as well as Magic UI versions 2.1.1, 3.0.0, 3.1.0, 3.1.1, and 4.0.0.
Exploiting CVE-2021-22442 can lead to an unauthorized system reset, resulting in data loss or device malfunction.
Currently, the best workaround for CVE-2021-22442 is to apply the necessary software updates provided by Huawei.