CVE-2021-37110

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	EMUI;Magic UI;Harmony OS	EMUI 11.0.1,EMUI 11.0.0,EMUI 10.1.1,EMUI 10.1.0,EMUI 10.0.0,EMUI 9.1.1,EMUI 9.1.0; Magic UI 4.0.0,Magic UI 3.1.1,Magic UI 3.1.0,Magic UI 3.0.0,Magic UI 2.1.1; Harmony OS 2.0

References

https://consumer.huawei.com/en/support/bulletin/2021/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2021/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526Vendor Advisory

Timeline

Published: Jan 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-371117.5There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.CVE-2021-371125.3Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lea CVE-2021-371137.5There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may CVE-2021-371145.3There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371155.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabil CVE-2021-371169.1PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of t CVE-2021-371177.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-371185.3The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may le CVE-2021-371197.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-37127.4ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a fi CVE-2021-371209.8There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escal CVE-2021-371219.8There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.