CVEvulnerability
CVE-2021-36994
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2021-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-362
Description
There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.
Affected configurations
• huawei emui 10.1.1
• huawei emui 11.0.0
• huawei magic ui 3.1.1
• huawei magic ui 4.0.0
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://consumer.huawei.com/en/support/bulletin/2021/7/ Vendor Advisory
- https://consumer.huawei.com/en/support/bulletin/2021/7/ Vendor Advisory