CVE-2021-22369

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permission to that of the root user.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

Vendor	Product	Versions
n/a	EMUI;Magic UI	EMUI 11.0.0,EMUI 10.1.1; Magic UI 4.0.0,Magic UI 3.1.1

References

https://consumer.huawei.com/en/support/bulletin/2021/5/Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2021/5/Vendor Advisory

Timeline

Published: Jun 30, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-22378.1Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). Supported versions tha CVE-2021-223707.5There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect servic CVE-2021-223717.5There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect serv CVE-2021-223727.5There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidenti CVE-2021-223739.1There is a Defects Introduced in the Design Process Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may af CVE-2021-223747.5There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause s CVE-2021-223759.8There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confid CVE-2021-223768.4A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to bypass use CVE-2021-223777.2There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00S CVE-2021-223785.3There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can CVE-2021-223797.5There is an Integer Underflow (Wrap or Wraparound) Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus CVE-2021-22388.1Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Process Operations). The supported