cbcvebase.
CVE-2021-22327
published 2021-04-28

CVE-2021-22327: There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files…

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4).

Affected

11 ranges
VendorProductVersion rangeFixed in
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——