CVE Vulnerabilities

CVE-2021-22403

Published: Oct 28, 2021 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands.

Affected Software

NameVendorStart VersionEnd Version
EmuiHuawei9.1.0 (including)9.1.0 (including)
EmuiHuawei9.1.1 (including)9.1.1 (including)
EmuiHuawei10.0.0 (including)10.0.0 (including)
EmuiHuawei10.1.0 (including)10.1.0 (including)
EmuiHuawei10.1.1 (including)10.1.1 (including)
EmuiHuawei11.0.0 (including)11.0.0 (including)
Magic_uiHuawei2.1.1 (including)2.1.1 (including)
Magic_uiHuawei3.0.0 (including)3.0.0 (including)
Magic_uiHuawei3.1.0 (including)3.1.0 (including)
Magic_uiHuawei3.1.1 (including)3.1.1 (including)
Magic_uiHuawei4.0.0 (including)4.0.0 (including)

References