First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2021-39978

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	2.0

References

Timeline

Published: Jan 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-399799.8HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.CVE-2021-39987.5A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and CVE-2021-399805.3Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnera CVE-2021-399815.3Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vul CVE-2021-399829.1Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write CVE-2021-399837.5The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to rest CVE-2021-399847.5Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service.CVE-2021-399857.5The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a pro CVE-2021-399865.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabil CVE-2021-399877.5The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to rest CVE-2021-399887.5The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to re CVE-2021-399897.5The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulne

CVE-2021-39978: High severity, CVSS 7.5 | Vulnix