CVE-2021-39990

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-399915.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-399927.8There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect servicCVE-2021-399939.8There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds aCVE-2021-399949.8There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect CVE-2021-399956.5Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-boCVE-2021-399969.8There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may caCVE-2021-399979.8There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may caCVE-2021-399987.5There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitaCVE-2021-399997.5There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerabilityCVE-2021-40006.1showdoc is vulnerable to URL Redirection to Untrusted SiteCVE-2021-400008.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious commandCVE-2021-400015.3The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be
CVE-2021-39990: Critical severity, CVSS 9.8 | Vulnix