CVE-2021-40012

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-400136.5Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.CVE-2021-400147.5The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data CVE-2021-400154.7There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affecCVE-2021-400166.5Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.CVE-2021-400179.8The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-boundCVE-2021-400187.5The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-400199.1Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds acceCVE-2021-40024.4A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmgetCVE-2021-400207.5There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerabilCVE-2021-400217.5The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentialityCVE-2021-400227.5The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentCVE-2021-400237.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.
CVE-2021-40012: High severity, CVSS 7.5 | Vulnix