Huawei P50 Pro update adds multi-device sharing feature

0

Huawei is always keen to provide better system security to its users. As a result, it releases security patches every month to protect its devices against various flaws. The recently released HarmonyOS October 2022 security patches fix many issues in the system to make it more reliable for users.

The Chinese tech maker has an excellent collection of phones and it is also known to send regular updates to its devices to keep the devices in good condition. But some issues occur with updates and put the system security at risk.

In the latest move, Huawei has released the details of the October 2022 HarmonyOS security patch. As usual, the Chinese tech giant has patched different levels of exploits and issues in Huawei devices. You can view the full details of the CVEs here.

The latest patch will give your device the ability to defend against malicious activity and theft. Therefore, installing October 2022 Update is really essential for increased system security and privacy. We strongly recommend that you upgrade your devices to the latest security patches.

October 2022 HarmonyOS security patches:

The October 2022 security patch fixes exploits and issues in the Core, System, Application section and third-party libraries of Huawei phones.

Core

The latest security patch fixes 12 CVEs at various levels in the Kernel section. The fix impacts various CVEs that cause out-of-bounds reading and affect data privacy. Additionally, successful exploitation of the vulnerability may lead to unauthorized access to the HISP module and memory overwrite.

System

The patch fixes a total of 19 vulnerabilities in this section of critical, high and medium levels. It identifies the Use-After-Free (UAF) vulnerability in the BT Hfp Client module and fixes it. Addresses another critical CVE in the HW_KEYMASTER module that may lead to malicious data construction and result in out-of-bounds access.

Meanwhile, it fixes a few more bugs that affect data privacy, data integrity, and fingerprinting service.

Application

The application section includes one high-level exploit and three medium-level exploits. The latest patch resolves serious vulnerabilities in the HwAirlink module and the facial recognition module. Notably, successful exploitation of these exposures results in the modification of sensitive data and can allow attackers to gain process control permissions and information leaks.

Interestingly, these new patches with patches will soon start reaching Huawei devices via software updates.

Share.

About Author

Comments are closed.