Vulnerability CVE-2021-40050

Vulnerability CVE-2021-40050

Published: 2022-03-10

Description:

There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.

Type:

CWE-125

(Out-of-bounds Read)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Huawei -> EMUI
Huawei -> Harmonyos
Huawei -> Magic ui

References:

https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202203-0000001257385193

https://consumer.huawei.com/en/support/bulletin/2022/3/

Copyright 2024, cxsecurity.com