CVE-2021-22437
HIGHHuawei EMUI and Magic UI - Integer Overflow leading to TOCTOU
Title source: llmDescription
There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://consumer.huawei.com/en/support/bulletin/2021/9/
Scores
CVSS v3
7.0
EPSS
0.0002
EPSS Percentile
6.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-190
Status
published
Products (4)
huawei/emui
10.1.0
huawei/emui
10.1.1
huawei/magic_ui
3.1.0
huawei/magic_ui
3.1.1
Published
Feb 25, 2022
Tracked Since
Feb 18, 2026