CVE-2021-40037

MEDIUM

Huawei Harmonyos < 2.0 - Type Confusion

Title source: rule
STIX 2.1

Description

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

References (2)

Core 2

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 5.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-843
Status published
Products (11)
huawei/emui 10.0.0
huawei/emui 10.1.0
huawei/emui 10.1.1
huawei/emui 11.0.0
huawei/emui 11.0.1
huawei/emui 12.0.0
huawei/harmonyos < 2.0
huawei/magic_ui 3.0.0
huawei/magic_ui 3.1.0
huawei/magic_ui 3.1.1
... and 1 more
Published Jan 10, 2022
Tracked Since Feb 18, 2026