CVE-2021-40037

Published: Jan 10, 2022Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

Affected (11)

Products: Huawei: Harmonyos, Emui, Magic Ui

3 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Harmonyos	Before 2.0

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Huawei Emui	Version 10.0.0
Huawei Emui	Version 10.1.0
Huawei Emui	Version 10.1.1
Huawei Emui	Version 11.0.0
Huawei Emui	Version 11.0.1
Huawei Emui	Version 12.0.0
Huawei Magic Ui	Version 3.0.0
Huawei Magic Ui	Version 3.1.0
Huawei Magic Ui	Version 3.1.1
Huawei Magic Ui	Version 4.0.0