What’s Vulnerable › Vulnerabilities

CVE-2021-36994

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-28 · updated 2026-06-17
• Weakness: CWE-362

Description

There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.

Affected products

• Huawei EMUI: 10.1.1, 11.0.0
• Huawei Magic UI: 3.1.1, 4.0.0

References

• https://consumer.huawei.com/en/support/bulletin/2021/7/
• https://consumer.huawei.com/en/support/bulletin/2021/7/

Get alerted when CVE-2021-36994 or the next vulnerability affects your stack