EMUI
Huawei February 2022 EMUI security patch fixes 11 privacy issues
Huawei’s major concern for its devices is system security because it can harm the user’s personal data, which is very dangerous. In the latest development, Huawei has resolved 11 dangerous privacy issues with the release of the latest February 2022 EMUI security patch.
Every month, Huawei made efforts and found the hidden privacy in the latest software version and fix it with the next security update rollout. The installation of the latest security patch can minimize the risk level.
Alongside February 2022 EMUI issues, the patch fixes 7 high and 1 medium-level CVE in the system. That’s not it, this security patch also brings fixes for 1 critical and 9 high-levels of CVE in the third-party libraries to provide more security to the system.
At present, Huawei is delivering the January 2022 EMUI security patch for its devices and began the rollout of the latest security improvement via OTA update. Now, you can check the solved CVE details, risk level, impact, and more detailed below.
The February 2022 security update fixed the following EMUI issues:
CVE 1:
- CVE-2021-39991: Unauthorized rewriting vulnerability with the memory access management module on ACPU
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE 2:
- CVE-2021-39986: Unauthorized rewriting vulnerability with the memory access management module on ACPU
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE 3:
- CVE-2021-37115: Unauthorized rewriting vulnerability with the memory access management module on ACPU
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE 4:
- CVE-2021-37109: Security protection bypass vulnerability with the modem
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may cause memory protection failure.
CVE 5:
- CVE-2021-40044: Permission verification vulnerability in the Bluetooth module
- Risk: Medium
- Affected versions: EMUI 12.0.0, EMUI 11.0.1, EMUI 11.0.0, EMUI 10.1.1, EMUI 10.1.0, Magic UI 4.0.0, Magic UI 3.1.1, Magic UI 3.1.0
- Impact: Successful exploitation of this vulnerability may cause unauthorized operations.
CVE 6:
- CVE-2021-40015: Race condition vulnerability in the binder driver subsystem in the kernel
- Risk: Medium
- Affected versions: EMUI 12.0.0, EMUI 11.0.0, EMUI 10.1.1, EMUI 10.1.0, EMUI 10.0.0, Magic UI 4.0.0, Magic UI 3.1.1, Magic UI 3.1.0, Magic UI 3.0.0
- Impact: Successful exploitation of this vulnerability may affect kernel stability.
CVE 7:
- CVE-2021-39992: Improper security permission configuration vulnerability on ACPU
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
CVE 8:
- CVE-2021-39997: Vulnerability of unstrict input parameter verification in the audio assembly
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may cause out-of-bounds access.
CVE 9:
- CVE-2021-39994: Arbitrary address access vulnerability with the product line test code
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
CVE 10:
- CVE-2021-40045: Vulnerability of signature verification mechanism failure in system upgrade through recovery mode
- Risk: High
- Affected versions: EMUI 12.0.0, EMUI 11.0.1, EMUI 11.0.0, Magic UI 4.0.0
- Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE 11:
- CVE-2021-37107: Improper memory access permission configuration on ACPU
- Risk: High
- Affected versions: EMUI 12.0.0
- Impact: Successful exploitation of this vulnerability may cause out-of-bounds access.
EMUI 13 beta kicked off for global users and it’s quite exciting but the roadmap of eligible Huawei devices is still awaited. While there’s no official news available on this matter.
In 2021, Huawei released EMUI 12 roadmap during the Asia pacific launch event but this year, there are no such plans revealed. Instead of the roadmap, Huawei opened the EMUI 13 beta for all Huawei P50, P50 Pro, P50 Pocket, and Mate Xs 2 foldable phones.
Unfortunately, the program is open for the Asia region but more users want to join the beta activity. Especially the European models are waiting for term to dive into the testing pool.
Despite the delay, we hope that the oldest set of devices may also get a slot into this EMUI 13 release program.
In the meantime, if you have a flagship phone, tune into the Beta app. From here open the “Me” section and then search for a new EMUI 13 beta project.
You need to sign up for the beta application and wait for the submission. Once submitted, you will be notified to download the OTA update package.
If the activity is not available on your phone, don’t worry, you will see the project after the beta opens in your country. Yet, we also suggest you keep an eye on the Beta application.
EMUI 13 Features:
EMUI 13 focuses on reinventing EMUI 12, this includes better security and privacy. This new software can review all of the data safety measures thanks to the new privacy center.
It has new options to allow or revoke permission, check the timeline for all of the user permission, and so on. You can also set new image privacy to hide the image meta information.
EMUI 13 also plays well around the user interface and there are many improvements made to features such as large folders and service widgets.
Huawei is rolling out EMUI 13.0.0.204 for the Huawei Mate 50 Pro smartphone in the global market. This update is packed with lots of new features, optimizations, and improvements for this flagship phone.
According to the information, EMUI 13.0.0.204 for Huawei Mate 50 Pro comes with new network improvements for certain situations. It has improvements in camera quality.
There are also new optimizations made for the audio quality of calls and games. On the flip side, the app has its own improvements for a better user experience.
Furthermore, Huawei has arranged new system stability optimizations that provide a performance boost for your smartphone.
According to the inputs, this upgrade integrates February 2023 security patch for the phone.
This is a big changelog for the Huawei Mate 50 Pro and the company is sending this to improve the phone’s performance in various scenarios. Also, if you have a Mate 50 Pro device, we suggest you get this version right away as soon as it appears.
The Mate 50 Pro is the first phone among all of the Huawei smartphones to get EMUI 13 but actually, it comes pre-installed. Since its launch, old phone users are waiting for a new major upgrade.
Recently, Huawei opened the beta program for a few flagships – P50 Pro, P50 Pocket, and Mate Xs 2 foldable phone. You should know that the latest EMUI 13 beta activity has limited slots and it’s available only for a region.
This new Huawei Mate 50 Pro update was released last week for global consumers and rolling out in batches. If your Mate 50 Pro has not received this firmware, make sure you get it via System settings.
(source – Huaweiblog)
Huawei P40 lite is getting a new software update in Europe, which brings the latest security patches released in the month of February 2023. However, the phone users are also waiting for EMUI 13 roadmap to confirm their eligibility for the next major software update.
Huaweiblog reports that Huawei P40 Lite users are getting the February 2023 security update in Europe with build version 12.0.0.268 and the OTA package size of 254 megabytes.
This is a staged rollout, and all of the P40 Lite users will get it gradually. Below you can check the complete changelog of this software release.
List of Changes
This update improves system security with security patches.
Security:
- Integrates security patches released in February 2023 for improved system security.
For more information on the security of Huawei’s EMUI system updates, visit the Huawei official website.
Notes on the update:
- Your personal data will not be deleted by the update. However, we recommend that you back up important data before updating.
- Charge your phone sufficiently.
- The update package will be automatically deleted after the update is complete.