Huawei HarmonyOS October 2022 security patch details out

We are in the first week of October and Huawei has just released the latest October 2022 security patch details for the devices running on the HarmonyOS operating system. On the other hand, the Chinese tech giant has also published October 2022 EMUI security details for global devices. Check the details here.

Huawei releases monthly security maintenance patches so as to keep its devices in tip-top condition. System security is very crucial for any device as it brings fixes for several vulnerabilities found in the latest software versions. Most importantly, the security patches protect the device against threats.

The October 2022 patch includes various fixes to resolve the bugs and issues in the system. Alongside this, the company will soon release the software update with the newest security patch starting from its flagship devices to its mid-range smartphones.

Meanwhile, there are some improvements and system optimizations underway to expand for different models in China. Furthermore, HarmonyOS 3 beta testing is also expanding in phases.

October 2022 Huawei HarmonyOS Security Patch Details:

Kernel Section:

The security patch from the Kernel section fixes a total of 12 vulnerabilities. It fixes one CVE from the critical level, three CVEs from the high level, and 8 CVEs from the medium level.

• Critical level – CVE-2022-38986
• High level – CVE-2022-41578, CVE-2022-41582, CVE-2022-39002.
• Medium level – CVE-2022-38984, CVE-2022-38998, CVE-2022-39011, CVE-2022-41584, CVE-2022-41585, CVE-2022-41576, CVE-2022-41577, CVE-2022-41583

System Section:

The latest patch rectifies 3 CVEs from the high level and 16 CVEs from the medium level. However, these vulnerabilities could cause errors in the device and may result in the phone lock being cracked.

• Critical – None
• High – CVE-2022-38983, CVE-2022-41589, CVE-2022-38982
• Medium – CVE-2021-46839, CVE-2021-46840, CVE-2022-41580, CVE-2022-41581, CVE-2022-41586, CVE-2022-41588, CVE-2022-41603, CVE-2022-41592, CVE-2022-41593, CVE-2022-41594, CVE-2022-41595, CVE-2022-41597, CVE-2022-41598, CVE-2022-41600, CVE-2022-41601, CVE-2022-41602.

Application section:

The September 2022 HarmonyOS patch includes 1 high-level CVE and three medium-level CVEs. These issues relate to the facial recognition module of the device and may affect data confidentiality.

• Critical – None
• High – CVE-2022-38980
• Medium – CVE-2022-38977, CVE-2022-38981, CVE-2022-38985

Third-Party Library:

The freshly released security patch from the third-party library section resolves 1 critical, 12 high, and 15 severities from the medium level of the system.

• Critical – CVE-2021-30339
• High – CVE-2022-20393, CVE-2022-20395, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990, CVE-2022-25314, CVE-2022-25704, CVE-2022-25706, CVE-2022-22095, CVE-2022-25656, CVE-2022-25670, CVE-2022-20260
• Medium – CVE-2022-28388, CVE-2022-20254, CVE-2022-20308, CVE-2022-20325, CVE-2022-20331, CVE-2022-20361, CVE-2022-20082, CVE-2021-35133, CVE-2022-20081, CVE-2021-35083, CVE-2022-22086, CVE-2021-30281, CVE-2021-30349, CVE-2021-39815, CVE-2022-20122.