by Kastro
Paper/Archive/CVE-2021-37049

CVE-2021-37049

Huawei EMUI — There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the me…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.5.595 × 2011.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.

Affected

ProductAffectedFixed inSource
EMUI11.0.0–CNA
EMUI10.1.1–CNA
Magic UI4.0.0–CNA
Magic UI3.1.1–CNA
HarmonyOS2.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2021/9refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727