6.5
CVE-2021-22327
- EPSS 0.53%
- Veröffentlicht 28.04.2021 12:15:08
- Zuletzt bearbeitet 21.11.2024 05:49:55
- Erkennungen
LoginThere is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ P30 Firmware Version 10.0.0.186(c10e7r5p1)
Huawei ≫ P30 Firmware Version 10.0.0.186(c461e4r3p1)
Huawei ≫ P30 Firmware Version 10.0.0.188(c00e85r2p11)
Huawei ≫ P30 Firmware Version 10.0.0.188(c01e88r2p11)
Huawei ≫ P30 Firmware Version 10.0.0.188(c605e19r1p3)
Huawei ≫ P30 Firmware Version 10.0.0.190(c185e4r7p1)
Huawei ≫ P30 Firmware Version 10.0.0.190(c431e22r2p5)
Huawei ≫ P30 Firmware Version 10.0.0.190(c432e22r2p5)
Huawei ≫ P30 Firmware Version 10.0.0.190(c605e19r1p3)
Huawei ≫ P30 Firmware Version 10.0.0.190(c636e4r3p4)
Huawei ≫ P30 Firmware Version 10.0.0.192(c635e3r2p4)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.408 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-smartphone-en