Vulnerability · Published Mar 2, 2021 · Assigned by huawei

CVE-2021-22296

Medium 5.5

In plain English

A medium-severity security flaw in HarmonyOS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)0.2%top 88.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system.

Affected products (as reported)

Vendor	Product	Versions
n/a	HarmonyOS	HarmonyOS 2.0

References

https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2021/2021-03.md x_refsource_MISC
https://device.harmonyos.com/cn/console/safetyDetail?id=9145efa5d9064d94a7fc3968b6054d83&pageSize=10&pageIndex=1 x_refsource_MISC
https://www.tenable.com/cve/CVE-2021-22296 x_refsource_MISC