CVE-2021-37049

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
HuaweiEMUI11.0.0; 10.1.1
HuaweiMagic UI4.0.0; 3.1.1
HuaweiHarmonyOS2.0

References

Timeline

Published
Dec 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-37059.8Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigCVE-2021-370507.5There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serCVE-2021-370519.1There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memoCVE-2021-370527.5There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leaCVE-2021-370537.5There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-370547.5There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability mayCVE-2021-370555.3There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certaiCVE-2021-370565.3There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts CVE-2021-370577.5There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to rCVE-2021-370585.3There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lCVE-2021-370599.8There is a Weaknesses Introduced During DesignCVE-2021-37067.5adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
CVE-2021-37049: Critical severity, CVSS 9.8 | Vulnix