by Kastro
Paper/Archive/CVE-2021-40050

CVE-2021-40050

Huawei EMUI — There is an out-of-bounds read vulnerability in the IFAA module.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.4.654 × 2013.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.

Affected

ProductAffectedFixed inSource
EMUI12.0.0–CNA
EMUI11.0.1–CNA
EMUI11.0.0–CNA
EMUI10.1.1–CNA
EMUI10.1.0–CNA
Magic UI4.0.0–CNA
Magic UI3.1.1–CNA
Magic UI3.1.0–CNA
HarmonyOS2.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2022/3refdevice.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202203-0000001257385193