cbcvebase.
CVE-2021-22327
published 2021-04-28

CVE-2021-22327: There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files…

PriorityP433medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.53%
41.5th percentile
There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4).

Affected

11 ranges
VendorProductVersion rangeFixed in
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——
huaweip30_firmware——

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.