by Kastro
Paper/Archive/CVE-2021-22345

CVE-2021-22345

huawei — There is an Input Verification Vulnerability in Huawei Smartphone.

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.5.555 × 2011.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds memory write.

Affected

ProductAffectedFixed inSource
EMUI, Magic UIEMUI 11.0.1–CNA
EMUI, Magic UIEMUI 11.0.0–CNA
EMUI, Magic UIEMUI 10.1.1–CNA
EMUI, Magic UIMagic UI 4.0.0–CNA
EMUI, Magic UIMagic UI 3.1.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2021/5