CVE-2021-40050
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.
Affects 3 products across 1 vendor.
Software reads data past the boundary of an allocated buffer, leaking sensitive information or causing crashes.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
An out-of-bounds read vulnerability in the IFAA module can lead to stack overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
BSID: BS-2022-GLOBAL-307101-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2021-40050?
What is the CVSS score for CVE-2021-40050?
Is CVE-2021-40050 actively exploited?
How do I remediate CVE-2021-40050?
What systems are affected by CVE-2021-40050?
| CVE ID | CVE-2021-40050 |
|---|---|
| BSID | BS-2022-GLOBAL-307101-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2022-03-10 |
| Last Modified | 2024-11-21 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Domains | |
| Source | NVD |
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.
Source: NIST NVD / MITRE CVE Database
The vulnerability is exploited by sending a specially crafted request to the IFAA module, which results in an out-of-bounds read. This can be triggered remotely, and no user interaction is required.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Huawei | Emui | 10.1.0 10.1.1 11.0.0 11.0.1 12.0.0 |
| Huawei | Magic Ui | 3.1.0 3.1.1 4.0.0 |
| Huawei | Harmonyos | 2.0 |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 17dd5dd10565241d9a6e5d900a4958245b2773a8a9c6c763fd6ae0b7145c266371ada5e23ecf7c15c517f217e85a42eab8a7de151602b0fce255ecd59ab76a20 |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →