CVE-2021-40017

2022-09-1600:00:00

huawei

www.cve.org

hw_keymaster

key format

validity check

out-of-bounds memory access

vulnerability

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "HarmonyOS;EMUI",
    "versions": [
      {
        "version": "HarmonyOS 2.0",
        "status": "affected"
      },
      {
        "version": "EMUI 12.0.0,EMUI 11.0.1",
        "status": "affected"
      }
    ]
  }
]