CVE-2021-39992

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
HuaweiEMUI12.0.0

References

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-399939.8There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds aCVE-2021-399949.8There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect CVE-2021-399956.5Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-boCVE-2021-399969.8There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may caCVE-2021-399979.8There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may caCVE-2021-399987.5There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitaCVE-2021-399997.5There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerabilityCVE-2021-40006.1showdoc is vulnerable to URL Redirection to Untrusted SiteCVE-2021-400008.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious commandCVE-2021-400015.3The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to beCVE-2021-400028.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious commandCVE-2021-400035.3HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-39992: High severity, CVSS 7.8 | Vulnix