CVE-2021-22308 Business logic in EMUI;Magic UI

Low 3.3 Published 3 Jun 2021 Updated 3 Aug 2024

Malicious apps can continuously take screenshots in the background, leading to potential personal information leakage on Huawei devices.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-22308?

CVE-2021-22308 is a low-severity vulnerability in Huawei Emui, published on 3 Jun 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.

Which versions are affected by CVE-2021-22308?

It affects 2 products.

Products include Huawei Emui, Huawei Magic Ui.

How do I fix CVE-2021-22308?

No fix has been published for CVE-2021-22308 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-22308 being exploited?

There is no known exploitation of CVE-2021-22308 in the wild and no public exploit code.

All Huawei Emui vulnerabilities

Sources

Also known as GHSA-8hw7-43qp-rq48.