CVE-2021-36994

There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

History

01 Nov 2021, 23:07

Type Values Removed Values Added
CWE CWE-362
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 3.7
CPE cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*
References (MISC) https://consumer.huawei.com/en/support/bulletin/2021/7/ - (MISC) https://consumer.huawei.com/en/support/bulletin/2021/7/ - Vendor Advisory

28 Oct 2021, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-10-28 13:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-36994

Mitre link : CVE-2021-36994

CVE.ORG link : CVE-2021-36994


JSON object : View

Products Affected

huawei

  • magic_ui
  • emui
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')