{"containers": {"cna": {"affected": [{"product": "EMUI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "12.0.0"}, {"status": "affected", "version": "11.0.0"}]}, {"product": "Magic UI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "4.0.0"}]}, {"product": "HarmonyOS", "vendor": "Huawei", "versions": [{"status": "affected", "version": "2.0"}]}], "descriptions": [{"lang": "en", "value": "There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity."}], "problemTypes": [{"descriptions": [{"description": "Heap-based buffer overflow", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-01-07T22:39:34", "orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/1/"}, {"tags": ["x_refsource_MISC"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@huawei.com", "ID": "CVE-2021-40026", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EMUI", "version": {"version_data": [{"version_affected": "=", "version_value": "12.0.0"}, {"version_affected": "=", "version_value": "11.0.0"}]}}, {"product_name": "Magic UI", "version": {"version_data": [{"version_affected": "=", "version_value": "4.0.0"}]}}, {"product_name": "HarmonyOS", "version": {"version_data": [{"version_affected": "=", "version_value": "2.0"}]}}]}, "vendor_name": "Huawei"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Heap-based buffer overflow"}]}]}, "references": {"reference_data": [{"name": "https://consumer.huawei.com/en/support/bulletin/2022/1/", "refsource": "MISC", "url": "https://consumer.huawei.com/en/support/bulletin/2022/1/"}, {"name": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331", "refsource": "MISC", "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T02:27:31.227Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/1/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331"}]}]}, "cveMetadata": {"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "assignerShortName": "huawei", "cveId": "CVE-2021-40026", "datePublished": "2022-01-07T22:39:34", "dateReserved": "2021-08-23T00:00:00", "dateUpdated": "2024-08-04T02:27:31.227Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*", "matchCriteriaId": "84A0CF45-FF48-42DF-9063-34AB6CA4FE12", "versionEndExcluding": "2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "0B701EC6-8208-4D22-95A6-B07D471A8A8B", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "F6066FAB-23F5-4CB2-B89E-B00F8835AC39", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de desbordamiento de b\u00fafer en la regi\u00f3n Heap de la memoria en el m\u00f3dulo AOD de los smartphones. Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad puede afectar la integridad del servicio"}], "id": "CVE-2021-40026", "lastModified": "2022-01-13T14:26:51.273", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-01-10T14:10:21.760", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/1/"}, {"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}