CVE-2021-40040: High severity Huawei Emui vulnerability

Published Aug 9, 2022

Updated

Vulnerability of writing data to an arbitrary address in the HWKEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality.

Affected Software

9 affected components

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Aug 9, 2022

CVE Published

via MITRE·08:11 PM

Data Sourced

via MITRE·08:11 PM

DescriptionWeakness

Aug 10, 2022

Data Sourced

via NVD·08:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-40040?

The severity of CVE-2021-40040 is classified as high due to its potential impact on data confidentiality.

How do I fix CVE-2021-40040?

To fix CVE-2021-40040, you should apply the latest security updates provided by Huawei for the affected software versions.

What versions are affected by CVE-2021-40040?

CVE-2021-40040 affects Huawei EMUI versions 10.0.0, 10.1.0, 10.1.1, 11.0.0, and Magic UI versions 3.0.0, 3.1.0, 3.1.1, 4.0.0, as well as HarmonyOS version 2.0.

What is the impact of exploiting CVE-2021-40040?

Exploiting CVE-2021-40040 may allow unauthorized writing of data to arbitrary addresses, leading to a breach of confidentiality.

Who is affected by CVE-2021-40040?

Users of affected Huawei devices running the specified versions of EMUI, HarmonyOS, and Magic UI are at risk from CVE-2021-40040.