CVE-2021-37107

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
HuaweiEMUI12.0.0

References

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-371097.8There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protectionCVE-2021-37119.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application willCVE-2021-371107.5There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371117.5There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.CVE-2021-371125.3Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may leaCVE-2021-371137.5There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability mayCVE-2021-371145.3There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371155.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-371169.1PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of tCVE-2021-371177.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-371185.3The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may leCVE-2021-371197.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
CVE-2021-37107: Medium severity, CVSS 5.5 | Vulnix