CVE-2021-40037

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-400387.5There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service inteCVE-2021-400397.5There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affCVE-2021-400407.5Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect cCVE-2021-400414.2There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validationCVE-2021-400426.5There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. CVE-2021-400437.8The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannotCVE-2021-400448.8There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorizeCVE-2021-400455.5There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of thisCVE-2021-400469.8PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resourcCVE-2021-400477.5There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulneraCVE-2021-400487.5There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affecCVE-2021-400497.5There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system in
CVE-2021-40037: Medium severity, CVSS 5.5 | Vulnix