CVE-2021-22387 — Improper Control of Dynamically-Managed Code Resources in Huawei Emui

CWE-913 — Improper Control of Dynamically-Managed Code Resources3 documents3 sources

Severity

9.8CRITICALNVD

EPSS

0.3%

top 46.67%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emui Huawei Magic UI

Timeline

PublishedAug 2

Latest updateMay 24

Description

There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to remotely execute commands.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5huawei/emui10.1.0, 10.1.1, 11.0.0+2

▶NVDhuawei/emui10.1.0, 10.1.1, 11.0.0+2

▶CVEListV5huawei/magic_ui3.1.0, 3.1.1, 4.0.0+2

▶NVDhuawei/magic_ui3.1.0, 3.1.1, 4.0.0+2

🔴Vulnerability Details

GHSA

GHSA-q72c-36c3-whh7: There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone↗2022-05-24

▶

CVEList

CVE-2021-22387: There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone↗2021-08-02

▶