CVE-2021-22437

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Feb 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-224389.8There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may causeCVE-2021-224398.1There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulneCVE-2021-224410.0Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider ServicesCVE-2021-224404.6There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to constrCVE-2021-224415.5Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.CVE-2021-224427.5There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability maCVE-2021-224437.5There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random address accCVE-2021-224449.8There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.CVE-2021-224457.5There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reseCVE-2021-224467.5There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to CVE-2021-224477.5There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabCVE-2021-224489.1There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read an
CVE-2021-22437: High severity, CVSS 7.0 | Vulnix