CVE-2021-46742: Critical severity emui 5.0 vulnerability

Published Apr 11, 2022

Updated

The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.

Affected Software

9 affected components

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Apr 11, 2022

CVE Published

via MITRE·07:38 PM

Data Sourced

via MITRE·07:38 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-46742?

CVE-2021-46742 is classified as a vulnerability affecting the availability of affected devices.

How do I fix CVE-2021-46742?

To fix CVE-2021-46742, update your Huawei device to the latest firmware version that addresses this vulnerability.

Which Huawei devices are affected by CVE-2021-46742?

CVE-2021-46742 affects Huawei devices running EMUI 10.1.0, 10.1.1, 11.0.0, 11.0.1, 12.0.0, and HarmonyOS 2.0 as well as Magic UI 3.1.0, 3.1.1, and 4.0.0.

What kind of exploitation is possible with CVE-2021-46742?

Exploitation of CVE-2021-46742 could allow unauthorized insertion and tampering of Settings.Secure data.

What should users do to protect themselves from CVE-2021-46742?

Users should ensure their Huawei devices are updated regularly to mitigate risks associated with CVE-2021-46742.