CVE-2021-36991

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Oct 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-369927.5There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confiCVE-2021-369937.5There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.CVE-2021-369943.7There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. SuccessfCVE-2021-369957.5There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft linkCVE-2021-369965.3There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission ofCVE-2021-369975.3There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerabilCVE-2021-369985.3There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to reaCVE-2021-369997.8There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and CVE-2021-37006.4A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbrediCVE-2021-370007.8Some Huawei wearables have a permission management vulnerability.CVE-2021-370017.5There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value CVE-2021-370029.8There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious
CVE-2021-36991: High severity, CVSS 7.5 | Vulnix