CVE-2021-22308

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 3, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223097.5There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit tCVE-2021-22318.1Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 1CVE-2021-223104.4There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, CVE-2021-223117.2There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can ruCVE-2021-223126.5There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending speCVE-2021-223137.5There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentialiCVE-2021-223147.8There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific opeCVE-2021-223166.8There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device canCVE-2021-223177.5There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confideCVE-2021-223185.5A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause systeCVE-2021-223197.5There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows.CVE-2021-22321.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affecte
CVE-2021-22308: Low severity, CVSS 3.3 | Vulnix