CVE-2021-40027

Katalog CVE

CVSS 7.5 · High EPSS 0,84%

Kerentanan NULL Pointer Dereference pada huawei harmonyos. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.

Rincian

Terbit di NVD

10 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,84% peluang dieksploitasi; lebih tinggi dari 56,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331 advisory vendor
• https://consumer.huawei.com/en/support/bulletin/2023/7/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858