Vulnerability Description
There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 30 Firmware | 10.0.0.182\(c00e180r6p2\) |
| Huawei | Mate 30 | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartpVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartpVendor Advisory
FAQ
What is CVE-2021-22306?
CVE-2021-22306 is a vulnerability with a CVSS score of 4.6 (MEDIUM). There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending ...
How severe is CVE-2021-22306?
CVE-2021-22306 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-22306?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 30 Firmware, Huawei Mate 30.