PT-2021-5191 · Huawei · Huawei Smartphone+1

Published 2021-09-01 · Updated 2021-12-09 · CVE-2021-37043

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei Smartphone (affected versions not specified)

Description The issue is related to a Stack-based Buffer Overflow vulnerability. This vulnerability may allow a remote attacker to cause a denial of service. Successful exploitation of this vulnerability may lead to malicious application processes occupying system resources. The vulnerability is also associated with insufficient authentication procedure in the Application Framework module of the HarmonyOS operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-05991

CVE-2021-37043

Affected Products

Harmonyos

Huawei Smartphone

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-37043 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37043 · Vendor Advisory
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05991 · Security Note
• https://t.me/cvenotify/24357 · Telegram Post