CVE-2021-22450

MEDIUM

HarmonyOS - Incomplete Cleanup

Title source: llm

A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to cause memory exhaustion.

Core 1

Core References

Vendor Advisory x_refsource_misc

CVSS v3 5.5

EPSS 0.0014

EPSS Percentile 4.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-459

Status published

Products (1)

huawei/harmonyos 2.0

Published Oct 28, 2021

Tracked Since Feb 18, 2026