CVE-2021-3700

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Feb 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-370007.8Some Huawei wearables have a permission management vulnerability.CVE-2021-370017.5There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value CVE-2021-370029.8There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious CVE-2021-370037.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370047.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370057.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370067.5There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause CVE-2021-370077.5There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.CVE-2021-370087.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370097.5There is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of CVE-2021-37016.6A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. ThisCVE-2021-370107.5There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vul
CVE-2021-3700: Medium severity, CVSS 6.4 | Vulnix