CVE-2021-40037

MEDIUM

HarmonyOS < 2.0 - Denial of Service via MPTCP Type Confusion

Title source: llm

Description

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://consumer.huawei.com/en/support/bulletin/2022/1/

Vendor Advisory x_refsource_misc

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 6.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-843

Status published

Products (11)

huawei/emui 10.0.0

huawei/emui 10.1.0

huawei/emui 10.1.1

huawei/emui 11.0.0

huawei/emui 11.0.1

huawei/emui 12.0.0

huawei/harmonyos < 2.0

huawei/magic_ui 3.0.0

huawei/magic_ui 3.1.0

huawei/magic_ui 3.1.1

... and 1 more

Published Jan 10, 2022

Tracked Since Feb 18, 2026