VULNERABILITY INTELLIGENCE
CVE-2021-40037
CVSS score5.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2022-01-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.
Weakness classification
- CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
Primary references
- psirt@huawei.com — Vendor Advisory
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory