CVE-2021-40037: Huawei Emui

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

Affected products

• Huawei Emui: version 10.0.0 only; version 10.1.0 only; version 10.1.1 only; version 11.0.0 only; version 11.0.1 only; version 12.0.0 only
• Huawei Harmonyos: before 2.0 (fixed in 2.0)
• Huawei Magic UI: version 3.0.0 only; version 3.1.0 only; version 3.1.1 only; version 4.0.0 only

Published 2022-01-10. Last modified 2026-06-17.