CVE-2021-40036: Huawei Harmonyos

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.

Affected products

• Huawei Harmonyos: before 2.0 (fixed in 2.0)

Published 2022-06-13. Last modified 2026-06-17.