CVE-2021-22385

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Aug 10, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223867.0A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root ElevationCVE-2021-223879.8There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulneCVE-2021-223889.8There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be CVE-2021-223899.8There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to beCVE-2021-22398.1Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected arCVE-2021-223909.8There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may causeCVE-2021-223917.5There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to CVE-2021-223927.5There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bCVE-2021-223937.5There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. TCVE-2021-223949.1There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during MultCVE-2021-223957.5There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-223967.8There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common pr
CVE-2021-22385: High severity, CVSS 7.8 | Vulnix