CVE-2021-22468 Information disclosure in HarmonyOS

Low 3.3 Published 28 Oct 2021 Updated 3 Aug 2024

Local attackers can exploit a vulnerability in HarmonyOS to leak kernel addresses, exposing sensitive system information.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-22468?

CVE-2021-22468 is a low-severity vulnerability in Huawei Harmonyos, published on 28 Oct 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage.

Weakness: CWE-668

Which versions are affected by CVE-2021-22468?

It affects 1 product.

Products include Huawei Harmonyos.

How do I fix CVE-2021-22468?

No fix has been published for CVE-2021-22468 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-22468 being exploited?

There is no known exploitation of CVE-2021-22468 in the wild and no public exploit code.

All Huawei Harmonyos vulnerabilities

Sources

Also known as GHSA-8jmg-238v-684v.