CVE-2022-41581

CVE-2022-41581 affects Huawei HarmonyOS HW_KEYMASTER module. The vulnerability is an input validation error due to lack of checksum on data read, enabling an attacker to construct malicious data that leads to out-of-bounds access. Documents corroborate a high-severity impact (CVE entry and region...

CVE-2021-46840

The HWKEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2022-41580

CVE-2022-41580 affects Huawei HarmonyOS HW_KEYMASTER module. The issue is that the module does not verify data it reads, enabling malicious construction of data and resulting in out-of-bounds access. Public references consistently describe this vulnerability and its impact as high, but no concret...

CVE-2022-41581

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2022-41580

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46839

The HWKEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2022-41580

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46840

CVE-2021-46840 affects Huawei HarmonyOS HW_KEYMASTER module, with an out-of-bounds access vulnerability in parameter set verification that could enable attacker-constructed data to trigger an out-of-bounds condition. The issue is described across several sources (NVD/NIST and CNNVD) as a vulnerab...

CVE-2022-41581: Out-of-bounds Read

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46839: Out-of-bounds Read

The HWKEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46840: Out-of-bounds Read

The HWKEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2022-41580: Out-of-bounds Read

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

Huawei HarmonyOS HW_KEYMASTER module input validation error vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS version 2.0 is vulnerable to an input validation error that stems from a lack of checksum on read content in the HWKEYMASTER module. An attacker could...

CVE-2021-40019

Out-of-bounds heap read vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-40017

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

Out-of-bounds

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

Heap overflow

Out-of-bounds heap read vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-40019

Out-of-bounds heap read vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-40019

CVE-2021-40019 describes an out-of-bounds heap read in Huawei’s HW_KEYMASTER module, with the NVD noting a CRITICAL 9.1 CVSS v3.1 score and potential out-of-bounds access if exploited. Connected sources indicate affected Huawei devices/ROMs (EMUI 10.1.x, 12.0.0; Magic UI 3.1.x), but the documents...

CVE-2021-40017

CVE-2021-40017 affects Huawei HarmonyOS HW_KEYMASTER; lack of key-format validity check can cause out-of-bounds memory access. Documents tie this to HarmonyOS 2.0 and related advisories, with patches referenced in Huawei security bulletins (2022). Exploit details are not provided in the sources; ...