NetSight
medium6.5

CVE-2021-22327

There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing.

Impact

There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4).

Affected products

VendorProductAffected versions
HuaweiP30 Firmware
Versions 10.0.0.186\(c10e7r5p1\), 10.0.0.186\(c461e4r3p1\), 10.0.0.188\(c00e85r2p11\), 10.0.0.188\(c01e88r2p11\), 10.0.0.188\(c605e19r1p3\), 10.0.0.190\(c185e4r7p1\)

Weakness classification

References