CVE-2021-40020: High severity emui 5.0 vulnerability

Published Jan 7, 2022

Updated

There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

Affected Software

8 affected components

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Jan 7, 2022

CVE Published

via MITRE·10:39 PM

Data Sourced

via MITRE·10:39 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40020?

CVE-2021-40020 is classified as a medium severity vulnerability due to potential impacts on service confidentiality.

How do I fix CVE-2021-40020?

To fix CVE-2021-40020, ensure that your device software is updated to the latest version provided by Huawei.

What devices are affected by CVE-2021-40020?

CVE-2021-40020 affects various versions of Huawei EMUI and Magic UI, specifically including versions 10.0.0, 10.1.0, 10.1.1, 11.0.0, and 3.0.0 to 4.0.0.

What type of vulnerability is CVE-2021-40020?

CVE-2021-40020 is characterized as an out-of-bounds array read vulnerability found in the security storage module.

What could happen if CVE-2021-40020 is exploited?

Successful exploitation of CVE-2021-40020 may lead to unauthorized access, affecting the confidentiality of services.