CVE-2021-46890

CRITICAL

Huawei EMUI and HarmonyOS - Incorrect Authorization in GPU Module

Title source: llm
STIX 2.1

Description

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0011
EPSS Percentile 29.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-863
Status published
Products (2)
huawei/emui 12.0.0
huawei/harmonyos 2.0
Published Jul 05, 2023
Tracked Since Feb 18, 2026