CVE-2021-22321

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Mar 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223227.5There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability maCVE-2021-223239.8There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permissioCVE-2021-223247.5There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data cCVE-2021-223255.3There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in video strCVE-2021-223267.1A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this vulnerability to obtCVE-2021-223276.5There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the iCVE-2021-223287.5There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an aCVE-2021-223294.9There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations tCVE-2021-22338.1Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup). Supported versions that are aCVE-2021-223306.5There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. AnCVE-2021-223317.5There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers caCVE-2021-223327.5There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800.