CVE-2021-36991

There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

History

12 Jul 2022, 17:42

Type Values Removed Values Added
CWE CWE-20 NVD-CWE-noinfo

01 Nov 2021, 23:13

Type Values Removed Values Added
References (MISC) https://consumer.huawei.com/en/support/bulletin/2021/7/ - (MISC) https://consumer.huawei.com/en/support/bulletin/2021/7/ - Vendor Advisory
CWE CWE-20
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CPE cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

28 Oct 2021, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-10-28 13:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-36991

Mitre link : CVE-2021-36991

CVE.ORG link : CVE-2021-36991


JSON object : View

Products Affected

huawei

  • magic_ui
  • emui