CVE-2021-22332

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is called, the same memory pointer is copied to two functional modules. Attackers can exploit this vulnerability by performing a malicious operation to cause the pointer double free. This may lead to module crash, compromising normal service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
n/aCloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800

References

Timeline

Published
Apr 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223339.8There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause cCVE-2021-223347.4There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirectCVE-2021-223357.8There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may causCVE-2021-223367.5There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cauCVE-2021-223375.3There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of usCVE-2021-223385.3There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input CVE-2021-223396.5There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of theCVE-2021-22345.3Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. CVE-2021-223404.1There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threCVE-2021-223414.9There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege caCVE-2021-223424.9There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attacCVE-2021-223439.1There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service integri