CVE-2021-40038

HIGH

HarmonyOS < 2.0 - Double Free in AOD Module

Title source: llm

There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

Core 2

Core References

Broken Link, Vendor Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0010

EPSS Percentile 26.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-415

Status published

Products (4)

huawei/emui 11.0.0

huawei/emui 12.0.0

huawei/harmonyos < 2.0

huawei/magic_ui 4.0.0

Published Jan 10, 2022

Tracked Since Feb 18, 2026