medium5.5
CVE-2021-22400
Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation.
Impact
Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A 10.0.1.10(C00E10R1P1),10.0.1.105(C00E103R3P3),10.0.1.115(C00E110R3P3),10.0.1.123(C00E121R3P3),10.0.1.135(C00E130R3P3),10.0.1.135(C00E130R4P1),10.0.1.152(C00E140R4P1),10.0.1.160(C00E160R4P1),10.0.1.167(C00E166R4P1),10.0.1.173(C00E172R5P1),10.0.1.178(C00E175R5P1) and 10.1.0.202(C00E79R5P1).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Oxfords-An00a Firmware | Versions 10.0.1.10\(c00e10r1p1\), 10.0.1.105\(c00e103r3p3\), 10.0.1.115\(c00e110r3p3\), 10.0.1.123\(c00e121r3p3\), 10.0.1.135\(c00e130r3p3\), 10.0.1.135\(c00e130r4p1\) |