PT-2022-11182 · Bastet · Bastet

Published 2022-03-07 · Updated 2022-03-14 · CVE-2021-40061

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Bastet (affected versions not specified)

Description The issue is related to accessing resources using an incompatible type, also known as type confusion, in the Bastet module. This could potentially impact integrity if successfully exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2021-40061

Affected Products

Bastet

References · 4

• https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202203-0000001257385193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40061 · Security Note
• https://consumer.huawei.com/en/support/bulletin/2022/3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40061 · Vendor Advisory