CVE-2021-40017

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2022-64981)

Huawei HarmonyOS is an operating system from Huawei China. HarmonyOS version 2.0 contains a buffer overflow vulnerability that stems from the fact that the HWKEYMASTER module does not perform a legitimacy check on the key format, which can be exploited to cause out-of-bounds access...

Huawei EMUI and Magic UI Information Disclosure Vulnerability (CNVD-2022-81251)

Huawei EMUI is a mobile operating system developed on Android. Huawei Magic UI is a smart device operating system. Huawei EMUI and Magic UI are vulnerable to an information disclosure vulnerability that originates from the issue of writing data to an arbitrary address in the HWKEYMASTER module,...

Design/Logic Flaw

Vulnerability of writing data to an arbitrary address in the HWKEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2021-40040

CVE-2021-40040 affects Huawei EMUI and Magic UI devices via the HW_KEYMASTER module, where a write to an arbitrary address is possible, potentially exposing confidential data. Root cause: improper handling in HW_KEYMASTER permitting uncontrolled writes. The CVSSv3.1 base score is 7.5 (HIGH) with ...