CVE-2021-40047: High severity emui 5.0 vulnerability

Published Mar 7, 2022

Updated

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

Affected Software

11 affected components

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Mar 7, 2022

CVE Published

via MITRE·01:51 PM

Data Sourced

via MITRE·01:51 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40047?

CVE-2021-40047 has a medium severity rating due to the potential impact on system integrity.

Which software versions are affected by CVE-2021-40047?

CVE-2021-40047 affects Huawei EMUI versions 10.0.0, 10.1.0, 10.1.1, 11.0.0, 11.0.1, and 12.0.0, as well as Huawei HarmonyOS 2.0 and Magic UI versions 3.0.0, 3.1.0, 3.1.1, and 4.0.0.

How do I fix CVE-2021-40047?

To fix CVE-2021-40047, upgrade your affected software to the latest patched version provided by Huawei.

What type of vulnerability is CVE-2021-40047?

CVE-2021-40047 is a memory management vulnerability that allows for memory not being released after its effective lifetime.

What could happen if CVE-2021-40047 is exploited?

If exploited, CVE-2021-40047 may negatively affect the integrity of the affected systems.