Security Bulletins for HUAWEI Smart Watches, June 2024
HUAWEI is releasing monthly security updates for flagship models. This security update includes HUAWEI and third-party library patches:
This security update includes the following third-party library patches:
This security update includes the CVE announced in the May 2024 Android Security bulletin:
Critical: none
High: CVE-2024-23708, CVE-2024-21471
Medium: none
Low: none
Already included in previous updates: none
※ For more information on security patches, please refer to the Android security bulletins (https://source.android.com/security/bulletin).
This security update includes the following HUAWEI patches:
CVE-2024-36499: Vulnerability of unauthorized screenshot capturing in the WMS module
Severity: Medium
Affected versions: HarmonyOS4.2.0, HarmonyOS2.0.0, HarmonyOS2.1.0, HarmonyOS3.0.0, HarmonyOS3.1.0, HarmonyOS4.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-36500: Privilege escalation vulnerability in the AMS module
Severity: High
Affected versions: HarmonyOS4.2.0, HarmonyOS3.0.0, HarmonyOS3.1.0, HarmonyOS4.0.0, EMUI 14.0.0, EMUI 13.0.0
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-36501: Memory management vulnerability in the boottime module
Severity: Medium
Affected versions: HarmonyOS4.2.0, HarmonyOS2.0.0, HarmonyOS2.1.0, HarmonyOS3.0.0, HarmonyOS3.1.0, HarmonyOS4.0.0, EMUI 14.0.0, EMUI 13.0.0, EMUI 12.0.0
Impact: Successful exploitation of this vulnerability can affect integrity.
Updated on: 2024-06-13