CVE-2021-37045

There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the…

published December 8, 2021

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Huawei smartphones, just waiting for its moment! 😱 Think of this like a delivery worker who mistakenly tosses out a parcel while still writing up the delivery receipt — the package is gone, but the receipt is still causing confusion. In this case, your smartphone might unexpectedly restart, and the kernel could execute code you definitely didn’t order! If exploited, this vulnerability could lead to your device unpredictably restarting, which could be incredibly frustrating and potentially expose sensitive data during the process. Not to mention the kernel-mode code execution could give an attacker more severe control over your device — not exactly the kind of guest you want crashing your party!

Put simply

Think of this like a delivery worker who mistakenly tosses out a parcel while still writing up the delivery receipt — the package is gone, but the receipt is still causing confusion. In this case, your smartphone might unexpectedly restart, and the kernel could execute code you definitely didn’t order! This use-after-free (UAF) vulnerability allows the exploitation of memory that has already been freed, leading to unexpected behavior, such as a device restart, and the execution of arbitrary code in kernel mode.

What to do

If exploited, this vulnerability could lead to your device unpredictably restarting, which could be incredibly frustrating and potentially expose sensitive data during the process. Not to mention the kernel-mode code execution could give an attacker more severe control over your device — not exactly the kind of guest you want crashing your party! While there's no known exploit yet, it's still a good idea to keep your device updated! Regularly check for software updates from Huawei and consider enabling automatic updates to ensure you have the latest security patches. Stay vigilant! You've got this! Just keep your device updated, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00924 · 60.1th percentile
Published
2021-12-08T14:12Z
EPSS history
Timeline
  • 08 DEC 14:12Z
    There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the…
    cvelistv5