CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40018

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40018

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40025

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40021

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality...

Design/Logic Flaw

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

Null pointer dereference

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

Security feature bypass

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality...

Design/Logic Flaw

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality...

Huawei HarmonyOS eID component memory out-of-bounds write vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS memory uninitialized usage vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40028

CVE-2021-40028 affects Huawei HarmonyOS eID/SeID module. The vulnerability is an out-of-bounds memory write in the eID/SeID component, with potential impact to data integrity. Documents indicate the issue exists in HarmonyOS’s SeID/eID implementation; no concrete exploit details or versions are p...

CVE-2021-40025

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40025

The CVE-2021-40025 entry describes a memory-usage vulnerability in Huawei HarmonyOS’s eID module (uninitialized memory). This may affect data confidentiality per NVD notes (CVSS v3.1: HIGH, network exploitability, no user interaction). Connected sources (Huawei HarmonyOS bulletin) imply a platfor...

CVE-2021-40021

Huawei HarmonyOS eID component has an out-of-bounds memory write vulnerability (CVE-2021-40021). Root cause: out-of-bounds write in the eID module. Impact: potential data confidentiality exposure. CVSSv3.1 base score 7.5 (HIGH); CVSSv2 base score 5.0 (MEDIUM). Exploitation details are not provide...

CVE-2021-40021

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40018

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40018

CVE-2021-40018 corresponds to a neutrality-focused vulnerability in Huawei HarmonyOS’s eID component, described as a null pointer reference. The issue arises when the eID path dereferences a released pointer, potentially exposing data confidentiality. Documented sources (NVD and CNVD family) iden...