High severity7.8NVD Advisory· Published Aug 3, 2021· Updated Jun 17, 2026

CVE-2021-22420

Description

A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing..

Affected products

Huawei/Harmonyosv53 versions
2.0+ 2 more
- (no CPE)range: 2.0
- (no CPE)
- cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*
HarmonyOS/HarmonyOSllm-fuzzy

Patches

Vulnerability mechanics

References

device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077nvdNot ApplicableVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000