Sign-up

ID

VAR-202108-2216


CVE

CVE-2021-22392


TITLE

Huawei  Vulnerability regarding buffer size calculation error in smartphones

Trust: 0.8

sources: JVNDB: JVNDB-2021-010871

DESCRIPTION

There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and directions to abnormal addresses. Huawei Smartphones contain vulnerabilities related to buffer size calculation errors.Information may be tampered with

Trust: 1.8

sources: NVD: CVE-2021-22392 // JVNDB: JVNDB-2021-010871 // VULHUB: VHN-380827 // VULMON: CVE-2021-22392

AFFECTED PRODUCTS

vendor:huaweimodel:magic uiscope:eqversion:3.1.0

Trust: 1.0

vendor:huaweimodel:emuiscope:eqversion:9.1.0

Trust: 1.0

vendor:huaweimodel:magic uiscope:eqversion:2.1.1

Trust: 1.0

vendor:huaweimodel:emuiscope:eqversion:9.1.1

Trust: 1.0

vendor:huaweimodel:magic uiscope:eqversion:3.0.0

Trust: 1.0

vendor:huaweimodel:emuiscope:eqversion:10.1.0

Trust: 1.0

vendor:huaweimodel:emuiscope:eqversion:11.0.0

Trust: 1.0

vendor:huaweimodel:emuiscope:eqversion:10.0.0

Trust: 1.0

vendor:huaweimodel:magic uiscope:eqversion:4.0.0

Trust: 1.0

vendor:huaweimodel:magic uiscope:eqversion:3.1.1

Trust: 1.0

vendor:huaweimodel:emuiscope:eqversion:10.1.1

Trust: 1.0

vendor:huaweimodel:emuiscope: - version: -

Trust: 0.8

vendor:huaweimodel:magic uiscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-010871 // NVD: CVE-2021-22392

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-22392
value: HIGH

Trust: 1.0

NVD: CVE-2021-22392
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202108-110
value: HIGH

Trust: 0.6

VULHUB: VHN-380827
value: MEDIUM

Trust: 0.1

VULMON: CVE-2021-22392
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-22392
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-380827
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-22392
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2021-22392
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-380827 // VULMON: CVE-2021-22392 // JVNDB: JVNDB-2021-010871 // CNNVD: CNNVD-202108-110 // NVD: CVE-2021-22392

PROBLEMTYPE DATA

problemtype:CWE-131

Trust: 1.1

problemtype:Buffer size calculation error (CWE-131) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-380827 // JVNDB: JVNDB-2021-010871 // NVD: CVE-2021-22392

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202108-110

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202108-110

PATCH

title:CVE-2021-22392url:https://consumer.huawei.com/en/support/bulletin/2021/6/

Trust: 0.8

title:Huawei Smartphone Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=159052

Trust: 0.6

sources: JVNDB: JVNDB-2021-010871 // CNNVD: CNNVD-202108-110

EXTERNAL IDS

db:NVDid:CVE-2021-22392

Trust: 3.4

db:JVNDBid:JVNDB-2021-010871

Trust: 0.8

db:CNNVDid:CNNVD-202108-110

Trust: 0.6

db:VULHUBid:VHN-380827

Trust: 0.1

db:VULMONid:CVE-2021-22392

Trust: 0.1

sources: VULHUB: VHN-380827 // VULMON: CVE-2021-22392 // JVNDB: JVNDB-2021-010871 // CNNVD: CNNVD-202108-110 // NVD: CVE-2021-22392

REFERENCES

url:https://consumer.huawei.com/en/support/bulletin/2021/6/

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2021-22392

Trust: 1.4

url:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202107-0000001170634565

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/131.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-380827 // VULMON: CVE-2021-22392 // JVNDB: JVNDB-2021-010871 // CNNVD: CNNVD-202108-110 // NVD: CVE-2021-22392

SOURCES

db:VULHUBid:VHN-380827
db:VULMONid:CVE-2021-22392
db:JVNDBid:JVNDB-2021-010871
db:CNNVDid:CNNVD-202108-110
db:NVDid:CVE-2021-22392

LAST UPDATE DATE

2024-08-14T15:33:04.584000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-380827date:2021-12-09T00:00:00
db:VULMONid:CVE-2021-22392date:2021-08-06T00:00:00
db:JVNDBid:JVNDB-2021-010871date:2022-07-11T05:34:00
db:CNNVDid:CNNVD-202108-110date:2021-11-29T00:00:00
db:NVDid:CVE-2021-22392date:2021-12-09T17:55:11.027

SOURCES RELEASE DATE

db:VULHUBid:VHN-380827date:2021-08-02T00:00:00
db:VULMONid:CVE-2021-22392date:2021-08-02T00:00:00
db:JVNDBid:JVNDB-2021-010871date:2022-07-11T00:00:00
db:CNNVDid:CNNVD-202108-110date:2021-08-02T00:00:00
db:NVDid:CVE-2021-22392date:2021-08-02T17:15:14.033