HarmonyOS October security update resolves input verification issue

Huawei has released the October security 2021 patch that soon rollout for eligible smartphones and tablets running on HarmonyOS. This monthly update fixes several known issues and vulnerabilities to resolve the improper behavior of the devices.

While exploring the patch details, we have come to know about a serious issue that can cause injection attacks, memory leakage, and compromised application. However, the HarmonyOS October 2021 security release note will fix this issue in the affected devices. You can check the basic details below-

• Affected Sector: Applications
• CVE: CVE-2021-37116
• Description: It’s an input verification vulnerability
• Impact: Successful exploitation of this vulnerability may affect the data confidentiality and product availability

The input verification issue with high severity is only affecting the devices working on HarmonyOS 2.0 system. The device infected will this issue, accepts improper data or information while receiving data from an external party especially from untrusted sources.

An attacker can intentionally send malicious input into the system. Meanwhile, the affected devices aren’t able to verify the authenticity of the data and take it. It causes an application to carry out some unplanned action such as data leakage or confidential information exposers.

Moreover, the attackers relay malicious code through an application to another system that accepts it due to holes in input verification algorithms. Luckily, as the latest HarmonyOS security patch will be released for the devices, this input verification issue will be fixed.

Besides, the security update also acknowledged 2 medium levels of CVE in the framework, 2 high and 4 medium levels CVEs in the kernel, and 1 high and 5 medium to low-level system threats. In addition, 2 critical, 3 high and 6 medium levels security threats fix in the HarmonyOS 2.0 applications.