CVEvulnerability
CVE-2021-40037
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-843
Description
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.
Affected configurations
• huawei harmonyos (< 2.0)
• huawei emui 10.0.0
• huawei emui 10.1.0
• huawei emui 10.1.1
• huawei emui 11.0.0
• huawei emui 11.0.1
• huawei emui 12.0.0
• huawei magic ui 3.0.0
• huawei magic ui 3.1.0
• huawei magic ui 3.1.1
• huawei magic ui 4.0.0
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness
References
- https://consumer.huawei.com/en/support/bulletin/2022/1/ Vendor Advisory
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331 Vendor Advisory
- https://consumer.huawei.com/en/support/bulletin/2022/1/ Vendor Advisory
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331 Vendor Advisory