Headline
CVE-2021-22316: February
There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device’s data security and functional availability.
Huawei is releasing monthly security updates for flagship models. This security update includes Android and Huawei patches:
This security update includes the CVE announced in the February 2021 Android security bulletin.
Critical:CVE-2021-0325,CVE-2021-0326
High:CVE-2020-11261,CVE-2020-11239,CVE-2020-11262,CVE-2020-10732,CVE-2020-11233,CVE-2020-11250,CVE-2020-11240,CVE-2021-0339,CVE-2021-0337,CVE-2021-0327,CVE-2021-0334,CVE-2021-0329,CVE-2021-0328,CVE-2021-0340,CVE-2021-0305,CVE-2021-0302,CVE-2021-0314,CVE-2021-0336,CVE-2021-0333,CVE-2021-0331,CVE-2021-0338,CVE-2021-0330,CVE-2021-0341,CVE-2019-2183,CVE-2020-0338,CVE-2021-0332
Medium:CVE-2020-11160,CVE-2020-0053,CVE-2019-17052,CVE-2020-0138,CVE-2020-0176,CVE-2020-0196,CVE-2020-0305,CVE-2020-12114,CVE-2020-27068,CVE-2020-0045,CVE-2020-0084,CVE-2020-0087,CVE-2020-0046,CVE-2020-0047,CVE-2020-0048,CVE-2020-0049,CVE-2020-0051,CVE-2020-0052,CVE-2020-0054,CVE-2020-0085,CVE-2020-0124,CVE-2020-0203,CVE-2020-0208,CVE-2020-0209,CVE-2020-0210,CVE-2020-0135,CVE-2020-0167,CVE-2020-0131,CVE-2020-0126,CVE-2020-0179,CVE-2020-0218,CVE-2020-0128,CVE-2020-0127,CVE-2020-0132,CVE-2020-0050,CVE-2020-0217,CVE-2020-0055,CVE-2020-0056,CVE-2020-0057,CVE-2020-0058,CVE-2020-0059,CVE-2020-0129,CVE-2019-17133,CVE-2019-13272,CVE-2019-13631,CVE-2019-15666,CVE-2019-10638,CVE-2019-15117,CVE-2019-11477,CVE-2019-11478,CVE-2019-11479,CVE-2020-0067,CVE-2020-0187,CVE-2020-0168,CVE-2020-0190,CVE-2020-0194,CVE-2019-13136,CVE-2020-0151,CVE-2020-0152,CVE-2020-0182,CVE-2020-0191,CVE-2020-0192,CVE-2020-0193,CVE-2020-0195,CVE-2020-0207,CVE-2020-0181,CVE-2020-0184,CVE-2020-0189,CVE-2020-0198,CVE-2019-9429,CVE-2019-9438,CVE-2019-9375,CVE-2019-9350,CVE-2019-9233,CVE-2019-9234,CVE-2019-9243,CVE-2020-0066,CVE-2020-0083
Low: none
Already included in previous updates:CVE-2020-11123,CVE-2020-3639,CVE-2020-11175,CVE-2020-11168,CVE-2020-11193,CVE-2020-11196,CVE-2020-11138,CVE-2020-11139,CVE-2020-3685,CVE-2020-11143,CVE-2020-11136,CVE-2020-11137,CVE-2020-11145,CVE-2020-3691,CVE-2020-3686,CVE-2020-11140,CVE-2020-11144,CVE-2020-11200,CVE-2020-11215,CVE-2020-11197,CVE-2020-11216,CVE-2020-11212,CVE-2020-11213,CVE-2020-11119,CVE-2021-0342,CVE-2021-0301
※For more information on security patches, please refer to the Android security bulletins (https://source.android.com/security/bulletin).
This security update includes the following Huawei patches:
CVE-2021-22317: Configuration defect in some Huawei products
Severity: Medium
Affected versions: EMUI 11.0.0, Magic UI 4.0.0
Impact: Successful exploitation of this vulnerability may impair data confidentiality.
CVE-2021-22316：Logic bypass vulnerability in some Huawei products due to design defects
Severity: Medium
Affected versions: EMUI 11.0.1, EMUI 11.0.0, EMUI 10.1.1, Magic UI 4.0.0, Magic UI 3.1.1
Impact: Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device’s data security and functional availability.
CVE-2021-22313: There is a defect in the underlying logic of some functions.
Severity: High
Affected versions: EMUI 11.0.1, EMUI 11.0.0, EMUI 10.1.1, EMUI 10.1.0, Magic UI 4.0.0, Magic UI 3.1.1, Magic UI 3.1.0
Impact: Successful exploitation of this vulnerability may impair data confidentiality.
CVE-2021-22308: Information leakage due to screenshots taken without notifications
Severity: Low
Affected versions: EMUI 11.0.0, EMUI 10.1.1, EMUI 10.1.0, EMUI 10.0.0, Magic UI 4.0.0, Magic UI 3.1.1, Magic UI 3.1.0, Magic UI 3.0.0
Impact: The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.