A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.
Weakness
The product calls free() twice on the same memory address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emui | Huawei | 11.0.0 (including) | 11.0.0 (including) |
| Magic_ui | Huawei | 4.0.0 (including) | 4.0.0 (including) |
Potential Mitigations
References
- https://consumer.huawei.com/en/support/bulletin/2021/6/
- https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077
- https://consumer.huawei.com/en/support/bulletin/2021/6/
- https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077