CVE-2021-22333

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

VendorProductVersions
n/aEMUI;Magic UIEMUI 11.0.0,EMUI 10.1.1,EMUI 10.1.0,EMUI 10.0.0,EMUI 9.1.1,EMUI 9.1.0; Magic UI 4.0.0,Magic UI 3.1.1,Magic UI 3.1.0,Magic UI 3.0.0,Magic UI 2.1.1

References

Timeline

Published
Jun 3, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223347.4There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirectCVE-2021-223357.8There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may causCVE-2021-223367.5There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cauCVE-2021-223375.3There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of usCVE-2021-223385.3There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input CVE-2021-223396.5There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of theCVE-2021-22345.3Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. CVE-2021-223404.1There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threCVE-2021-223414.9There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege caCVE-2021-223424.9There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attacCVE-2021-223439.1There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service integriCVE-2021-223445.3There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary Do
CVE-2021-22333: Critical severity, CVSS 9.8 | Vulnix