6.5
CVE-2021-22327
- EPSS 0.16%
- Published 28.04.2021 12:15:08
- Last modified 21.11.2024 05:49:55
- Source psirt@huawei.com
- Teams watchlist Login
- Open Login
There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4).
Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ P30 Firmware Version10.0.0.186(c10e7r5p1)
Huawei ≫ P30 Firmware Version10.0.0.186(c461e4r3p1)
Huawei ≫ P30 Firmware Version10.0.0.188(c00e85r2p11)
Huawei ≫ P30 Firmware Version10.0.0.188(c01e88r2p11)
Huawei ≫ P30 Firmware Version10.0.0.188(c605e19r1p3)
Huawei ≫ P30 Firmware Version10.0.0.190(c185e4r7p1)
Huawei ≫ P30 Firmware Version10.0.0.190(c431e22r2p5)
Huawei ≫ P30 Firmware Version10.0.0.190(c432e22r2p5)
Huawei ≫ P30 Firmware Version10.0.0.190(c605e19r1p3)
Huawei ≫ P30 Firmware Version10.0.0.190(c636e4r3p4)
Huawei ≫ P30 Firmware Version10.0.0.192(c635e3r2p4)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.337 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.