high7.5
CVE-2021-40040
Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module.
Impact
Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 10.0.0, 10.1.0, 10.1.1, 11.0.0 |
| Huawei | Harmonyos | Version 2.0 |
| Huawei | Magic Ui | Versions 3.0.0, 3.1.0, 3.1.1, 4.0.0 |
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2022/8/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845
- https://consumer.huawei.com/en/support/bulletin/2022/8/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845