First published: Fri Feb 25 2022(Updated: )
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei EMUI | =9.1.0 | |
Huawei EMUI | =9.1.1 | |
Huawei EMUI | =10.0.0 | |
Huawei EMUI | =10.1.0 | |
Huawei EMUI | =10.1.1 | |
Huawei EMUI | =11.0.0 | |
Huawei Magic UI | =2.1.1 | |
Huawei Magic UI | =3.0.0 | |
Huawei Magic UI | =3.1.0 | |
Huawei Magic UI | =3.1.1 | |
Huawei Magic UI | =4.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-22448 has been classified as a high severity vulnerability due to the potential for unauthorized file read and write operations.
To fix CVE-2021-22448, users should update their Huawei devices to the latest software version provided by Huawei.
CVE-2021-22448 affects Huawei Emui versions 9.1.0, 9.1.1, 10.0.0, 10.1.0, 10.1.1, 11.0.0 and Magic UI versions 2.1.1, 3.0.0, 3.1.0, 3.1.1, and 4.0.0.
Exploitation of CVE-2021-22448 could allow unauthorized access to sensitive files, potentially leading to data loss or privacy breaches.
Yes, CVE-2021-22448 is a vulnerability specifically found in Huawei smartphone operating systems, including EMUI and Magic UI.