CVE-2021-40050: Critical severity emui 5.0 vulnerability

Published Mar 7, 2022

Updated

There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.

Affected Software

9 affected components

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Mar 7, 2022

CVE Published

via MITRE·01:50 PM

Data Sourced

via MITRE·01:50 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40050?

CVE-2021-40050 is classified as a high severity vulnerability due to the potential for stack overflow exploitation.

How do I fix CVE-2021-40050?

To fix CVE-2021-40050, update your Huawei device to the latest software version that addresses this vulnerability.

Which Huawei products are affected by CVE-2021-40050?

CVE-2021-40050 affects specific versions of Huawei Emui, HarmonyOS, and Magic UI, including versions 10.1.0, 10.1.1, 11.0.0, 11.0.1, 12.0.0, and Magic UI 3.1.0, 3.1.1, 4.0.0.

What type of vulnerability is CVE-2021-40050?

CVE-2021-40050 is an out-of-bounds read vulnerability within the IFAA module.

Can CVE-2021-40050 lead to remote code execution?

While CVE-2021-40050 may cause stack overflow, it primarily poses risks like denial of service but does not directly imply remote code execution.