Huawei HarmonyOS eID component memory out-of-bounds write vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40028

CVE-2021-40028 affects Huawei HarmonyOS eID/SeID module. The vulnerability is an out-of-bounds memory write in the eID/SeID component, with potential impact to data integrity. Documents indicate the issue exists in HarmonyOS’s SeID/eID implementation; no concrete exploit details or versions are p...

CVE-2021-40025

The CVE-2021-40025 entry describes a memory-usage vulnerability in Huawei HarmonyOS’s eID module (uninitialized memory). This may affect data confidentiality per NVD notes (CVSS v3.1: HIGH, network exploitability, no user interaction). Connected sources (Huawei HarmonyOS bulletin) imply a platfor...

CVE-2021-40025

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40021

Huawei HarmonyOS eID component has an out-of-bounds memory write vulnerability (CVE-2021-40021). Root cause: out-of-bounds write in the eID module. Impact: potential data confidentiality exposure. CVSSv3.1 base score 7.5 (HIGH); CVSSv2 base score 5.0 (MEDIUM). Exploitation details are not provide...

CVE-2021-40021

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40018

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40018

CVE-2021-40018 corresponds to a neutrality-focused vulnerability in Huawei HarmonyOS’s eID component, described as a null pointer reference. The issue arises when the eID path dereferences a released pointer, potentially exposing data confidentiality. Documented sources (NVD and CNVD family) iden...

CVE-2021-40021: Out-of-bounds Write

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40028: Out-of-bounds Write

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40018: NULL Pointer Dereference

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40025: Improper Initialization

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality...

Huawei HarmonyOS eID component null pointer reference vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. A null pointer reference vulnerability exists in the Huawei HarmonyOS eID component, which originates when the product's eID component makes a call to a released pointer...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

CVE-2021-40260

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

CVE-2021-40260: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

CVE-2021-34650

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...

CVE-2021-34650

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...