Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttps://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/121 - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bca00032ad68d0b0aa2c1f7558db931e52bd9cd2 - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/5398f04d772f7f8baf5265715696ed88db0f0512 - https://www.openwall.com/lists/oss-security/2022/07/23/1 - http://www.openwall.com/lists/oss-security/2022/07/25/1 - https://github.com/pedrib/PoC/blob/master/fuzzing/CVE-2021-46829/CVE-2021-46829.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5IHHEYFD6GDZVALKIPPRD2U4JNZUZWR/ - https://www.debian.org/security/2022/dsa-5228
CVE ID: CVE-2021-46830 State: PUBLISHED Published: 2022-07-27T22:03:37 Last Updated: 2024-08-04T05:17:42.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended. Additional Analyst Notes: - CVE Program Container: References: - https://www.goanywhere.com/support/advisory/68x - https://www.goanywhere.com/support/release-notes/mft?limit=0 - https://my.goanywher
oanywhere.com/support/advisory/68x - https://www.goanywhere.com/support/release-notes/mft?limit=0 - https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml
CVE ID: CVE-2021-46834 State: PUBLISHED Published: 2022-09-20T19:45:15.000Z Last Updated: 2025-05-28T16:01:25.047Z Vendors: n/a Products: JAD-AL50 Problem Types: Permission Bypass Description: A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225(C00E220R3P4). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220819-01-7e0a6103-en
CVE ID: CVE-2021-46835 State: PUBLISHED Published: 2022-09-20T19:49:49.000Z Last Updated: 2025-05-28T15:59:02.434Z Vendors: n/a Products: WS7200-10 Problem Types: Traffic Hijacking Description: There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220831-01-5370a6df-en
CVE ID: CVE-2021-46836 State: PUBLISHED Published: 2022-09-16T17:55:42 Last Updated: 2024-08-04T05:17:42.758Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Information leakage vulnerability Description: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2021-46837 State: PUBLISHED Published: 2022-08-30T00:00:00 Last Updated: 2024-08-04T05:17:42.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a T.38 re-invite initiated by Asterisk. This is a re-occurrence of the CVE-2019-15297 symptoms but not for exactly the same reason. The crash occurs because there is an append operation relative to the active topology, but this should instead be a replace operation. Additional Analyst Notes: -
d operation relative to the active topology, but this should instead be a replace operation. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.asterisk.org/pub/security/AST-2021-006.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html - https://www.debian.org/security/2022/dsa-5285
CVE ID: CVE-2021-46839 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T15:12:31.059Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Lack of length check vulnerability Description: The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2021-46840 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T15:11:48.840Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds access vulnerability Description: The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2021-46841 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:18:44.145Z Vendors: Apple Products: Apple Music for Android Problem Types: An attacker in a privileged network position can track a user's activity Description: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213472
CVE ID: CVE-2021-46846 State: PUBLISHED Published: 2022-11-03T16:06:09.815Z Last Updated: 2025-05-02T19:31:06.168Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Integrated Lights-Out 5 Problem Types: n/a Description: Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04133en_us
CVE ID: CVE-2021-46848 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T14:32:10.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5 - https://gitlab.com/gnutls/libtasn1/-/issues/32 - https://bugs.gentoo.org/866237 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/ - https://lists.fedoraprojec
s/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/ - https://security.netapp.com/advisory/ntap-20221118-0006/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html
CVE ID: CVE-2021-46849 State: REJECTED Published: N/A Last Updated: 2022-11-23T00:00:00 Description: No description available.
CVE ID: CVE-2021-46850 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T14:29:33.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute arbitrary commands via the v_sftp_license parameter when sending HTTP POST requests to the /edit/server endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/myvesta/vesta/releases/tag/0.9.8-26-43 - https://github.com/myvesta/vesta/commit/7991753ab7c5c568768028fb77554db8ea149f17 - h
ta/vesta/releases/tag/0.9.8-26-43 - https://github.com/myvesta/vesta/commit/7991753ab7c5c568768028fb77554db8ea149f17 - https://github.com/serghey-rodin/vesta/commit/a4e4542a6d1351c2857b169f8621dd9a13a2e896 - https://www.exploit-db.com/exploits/49674 - https://blog.talosintelligence.com/2021/06/necro-python-bot-adds-new-tricks.html
CVE ID: CVE-2021-46851 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T17:35:30.794Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unstrict verification vulnerability Description: The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2021-46852 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T17:34:36.259Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Logic bypass vulnerability Description: The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2021-46853 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:38:19.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nostarttls.secvuln.info/ - https://bugs.gentoo.org/807613 - https://security.gentoo.org/glsa/202301-07
CVE ID: CVE-2021-46854 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T20:17:36.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/proftpd/proftpd/issues/1284 - https://github.com/proftpd/proftpd/pull/1285 - https://bugs.gentoo.org/811495 - http://www.proftpd.org/docs/RELEASE_NOTES-1.3.7e - https://security.gentoo.org/glsa/202305-03
CVE ID: CVE-2021-46856 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:53:31.999Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Path traversal vulnerability Description: The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397 - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-00000014
om/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2021-46867 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-10T13:50:31.143Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds memory access vulnerability Description: The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2021-46868 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-10T13:48:22.184Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds memory access vulnerability Description: The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
CVE ID: CVE-2021-46871 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-09T17:21:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/advisories/GHSA-j3gg-r6gp-95q2 - https://github.com/phoenixframework/phoenix_html/commit/62a0139fb716bcdce697f6221244bd81d321d620
CVE ID: CVE-2021-46872 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:13:15.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nim-lang/nimforum - https://forum.nim-lang.org/t/8852 - https://github.com/nim-l
hment: References: - https://github.com/nim-lang/nimforum - https://forum.nim-lang.org/t/8852 - https://github.com/nim-lang/Nim/pull/19134 - https://github.com/nim-lang/Nim/compare/v1.6.0...v1.6.2 - https://github.com/nim-lang/Nim/commit/46275126b89218e64844eee169e8ced05dd0e2d7
CVE ID: CVE-2021-46873 State: PUBLISHED Published: 2023-01-29T00:00:00.000Z Last Updated: 2025-03-28T15:47:37.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useless. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.zx2c4.com/pipermail/wireguard/2021-August/006916.html
CVE ID: CVE-2021-46875 State: PUBLISHED Published: 2023-03-12T00:00:00.000Z Last Updated: 2025-03-04T21:15:50.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ezsystems/ezpublish-kernel/commit/29fecd2afe86f763510f10c02f14962d028f311b - https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-mrvj-7q4f-5p42
CVE ID: CVE-2021-46876 State: PUBLISHED Published: 2023-03-12T00:00:00.000Z Last Updated: 2025-03-05T16:44:45.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ezsystems/ezpublish-kernel/commit/b496f073c3f03707d3531a6941dc098b84e3cbed - https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-gmrf-99gw-vvwj
CVE ID: CVE-2021-46877 State: PUBLISHED Published: 2023-03-18T00:00:00.000Z Last Updated: 2025-02-26T19:02:21.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw - https://github.com/FasterXML/jackson-databind/issues/3328
CVE ID: CVE-2021-46878 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T21:01:09.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file and trick the victim opening it using the affect software, triggering use-after-free and execute arbitrary code on the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
code on the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27742 - https://github.com/fluent/fluent-bit/pull/3115
CVE ID: CVE-2021-46879 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T19:56:04.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_value_ext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute arbitrary code on the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 - https://github.com/fluent/fluent-bi
ichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 - https://github.com/fluent/fluent-bit/pull/3100
CVE ID: CVE-2021-46880 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T16:08:02.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt - https://github.com/openbsd/src/commit/3f851282810fa0ab4b90b3b1ecec2e8717ef16f8 - https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/006_x509.patch.sig - https://security.n
b90b3b1ecec2e8717ef16f8 - https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/006_x509.patch.sig - https://security.netapp.com/advisory/ntap-20230517-0006/
CVE ID: CVE-2021-46881 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T17:06:40.504Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Memory Overwriting Vulnerability Description: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2021-46882 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T16:55:06.614Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Memory Overwriting Vulnerability Description: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2021-46883 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T16:47:38.524Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Memory Overwriting Vulnerability Description: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2021-46884 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T16:37:58.191Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Memory Overwriting Vulnerability Description: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2021-46885 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T16:30:18.854Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Memory Overwriting Vulnerability Description: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2021-46886 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T16:23:12.177Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Memory Overwriting Vulnerability Description: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2021-46887 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T21:13:26.541Z Vendors: Huawei Products: EMUI Problem Types: Integer Underflow (Wrap or Wraparound) Description: Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/