51 matches found
CVE-2021-22304
The CVE-2021-22304 entry corresponds to a use-after-free vulnerability in Huawei Taurus-AL00A devices (firmware version 10.0.0.1, build C00E1R1P1). The issue arises when a module references memory after it has been freed while processing certain messages, which can cause the module to crash and p...
CVE-2021-22304
There is a use after free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash,...
CVE-2021-22293
Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1,...
CVE-2021-22293
CVE-2021-22293 concerns an inconsistency in how some Huawei products interpret HTTP requests, allowing information leakage. Affected products include CampusInsight (V100R019C10), ManageOne (6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2) and Taurus-AL00A (10.0.0.1(C00E1R1P1)). T...
CVE-2021-22302
CVE-2021-22302 describes an out-of-bounds read in Huawei Taurus-AL00A smartphones (version 10.0.0.1, build C00E1R1P1). A module fails to properly validate input, allowing attackers to trigger an out-of-bounds condition by sending malicious input through a specific app, potentially impacting servi...
CVE-2021-22302
There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...
CVE-2021-22303
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...
CVE-2021-22303
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...
CVE-2021-22303
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...
Double free
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...
CVE-2021-22303
The CVE-2021-22303 entry concerns Huawei Taurus-AL00A smartphone running 10.0.0.1 (C00E1R1P1). The vulnerability is a pointer double free caused by lack of multi-thread reentry protection when a function is called, potentially enabling a crash of the affected module and disruption of normal servi...
CVE-2021-22303
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...
Huawei Taurus-AL00A 资源管理错误漏洞
The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A memory misreference vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability arises because a module references freed memory when the program is processing certain messages. An...
Huawei Taurus-AL00A 缓冲区错误漏洞
The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. An out-of-bounds read vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability stems from the program not properly validating certain inputs. An attacker can exploit the vulnerability ...
Huawei Taurus-AL00A 资源管理错误漏洞
The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability stems from the program not setting multi-thread reentry protection when calling a function. An attacker can exploit...
Huawei Taurus-AL00A Out-of-Bounds Read Vulnerability
The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. An out-of-bounds read vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability stems from the program not properly validating certain inputs. An attacker can exploit the vulnerability ...
Huawei Taurus-AL00A Memory Misreference Vulnerability
The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A memory misreference vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability arises because a module references freed memory when the program is processing certain messages. An...
Huawei Taurus-AL00A Pointer Double Release Vulnerability
The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability stems from the program not setting multi-thread reentry protection when calling a function. An attacker can exploit...
CVE-2020-9093
There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...
CVE-2020-9093
There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...