First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-39969

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Huawei	EMUI	11.0.0; 10.1.1; 10.1.0; 10.0.0; 9.1.1; 9.1.0
Huawei	Magic UI	4.0.0; 3.1.1; 3.1.0; 3.0.0; 2.1.1
Huawei	HarmonyOS	2.0

References

Timeline

Published: Jan 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-39975.5A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested CVE-2021-399707.5HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the syste CVE-2021-399717.5Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could c CVE-2021-399727.5MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability co CVE-2021-399737.5There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.CVE-2021-399747.5There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-399757.5Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.CVE-2021-399767.8There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated CVE-2021-399777.5The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to re CVE-2021-399787.5Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.CVE-2021-399799.8HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.CVE-2021-39987.5A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and

CVE-2021-39969: High severity, CVSS 7.5 | Vulnix