CVE-2021-22308

2021-06-0315:15:20

huawei

www.cve.org

business logic errors

huawei smartphone

malicious apps

screenshots

personal information leakage

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.

CNA Affected

[
  {
    "product": "EMUI;Magic UI",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EMUI 11.0.0,EMUI 10.1.1,EMUI 10.1.0,EMUI 10.0.0"
      },
      {
        "status": "affected",
        "version": "Magic UI 4.0.0,Magic UI 3.1.1,Magic UI 3.1.0,Magic UI 3.0.0"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2021/2/