CVE-2021-40048 — Incorrect Calculation of Buffer Size in Huawei Emui

CWE-131 — Incorrect Calculation of Buffer Size3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 64.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei EmuiHuawei HarmonyosHuawei Magic UI
Timeline
PublishedMar 10
Latest updateMar 11

Description

There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5huawei/emui6 versions+5
▶NVDhuawei/emui6 versions+5
▶CVEListV5huawei/magic_ui4 versions+3
▶NVDhuawei/magic_ui4 versions+3
▶CVEListV5huawei/harmonyos2.0

🔴Vulnerability Details

2
GHSA
GHSA-w7f6-xx44-hwc3: There is an incorrect buffer size calculation vulnerability in the video framework↗2022-03-11
▶
CVEList
CVE-2021-40048: There is an incorrect buffer size calculation vulnerability in the video framework↗2022-03-07
▶
CVE-2021-40048 — Incorrect Calculation of Buffer Size | cvebase