CVE-2021-22306

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Feb 6, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-223075.5There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be pro CVE-2021-223083.3There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots CVE-2021-223097.5There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit t CVE-2021-22318.1Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 1 CVE-2021-223104.4There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, CVE-2021-223117.2There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can ru CVE-2021-223126.5There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending spe CVE-2021-223137.5There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiali CVE-2021-223147.8There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific ope CVE-2021-223166.8There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can CVE-2021-223177.5There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confide CVE-2021-223185.5A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause syste