CVE Vulnerabilities

CVE-2021-22386

Double Free

Published: Aug 10, 2021 | Modified: Dec 09, 2021
CVSS 3.x
7
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.

Weakness

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 11.0.0 (including) 11.0.0 (including)
Magic_ui Huawei 4.0.0 (including) 4.0.0 (including)

Potential Mitigations

References