CVE-2021-22386

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

Vendor	Product	Versions
n/a	EMUI;Magic UI;HarmonyOS	EMUI 11.0.0; Magic UI 4.0.0; HarmonyOS 2.0

References

https://consumer.huawei.com/en/support/bulletin/2021/6/Vendor Advisory
https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077Third Party Advisory
https://consumer.huawei.com/en/support/bulletin/2021/6/Vendor Advisory
https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077Third Party Advisory

Timeline

Published: Aug 10, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-223879.8There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulne CVE-2021-223889.8There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be CVE-2021-223899.8There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be CVE-2021-22398.1Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected ar CVE-2021-223909.8There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause CVE-2021-223917.5There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to CVE-2021-223927.5There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification b CVE-2021-223937.5There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. T CVE-2021-223949.1There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Mult CVE-2021-223957.5There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-223967.8There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common pr CVE-2021-223976.7There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verification when the