CVE-2021-40017: Huawei Emui

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.

Affected products

• Huawei Emui: version 11.0.1 only; version 12.0.0 only
• Huawei Harmonyos: version 2.0 only

Published 2022-09-16. Last modified 2026-06-17.