Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39940 State: PUBLISHED Published: 2021-12-13T15:47:47 Last Updated: 2024-08-04T02:20:34.190Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitLab Maven Package registry is vulnerable to a regular expression denial of service when a specifically crafted string is sent. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gi
cifically crafted string is sent. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/263116 - https://hackerone.com/reports/997961 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39940.json
CVE ID: CVE-2021-39941 State: PUBLISHED Published: 2021-12-13T15:48:00 Last Updated: 2024-08-04T02:20:34.131Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed non-project members to see the default branch name for projects that restrict access to the repository to project members Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/33864 - https://hackerone.com/reports/706361 - https://gitlab.com/gitla
- https://gitlab.com/gitlab-org/gitlab/-/issues/33864 - https://hackerone.com/reports/706361 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39941.json
CVE ID: CVE-2021-39942 State: PUBLISHED Published: 2022-01-18T16:52:12 Last Updated: 2024-08-04T02:20:34.141Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows low-privileged users to bypass file size limits in the NPM package repository to potentially cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gi
entially cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/297492 - https://hackerone.com/reports/1071861 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39942.json
CVE ID: CVE-2021-39943 State: PUBLISHED Published: 2022-02-09T22:05:14 Last Updated: 2024-08-04T02:20:34.212Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allowed a user to update the status of the check via an API call Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/343604 - https://hac
Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/343604 - https://hackerone.com/reports/1375393 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39943.json
CVE ID: CVE-2021-39944 State: PUBLISHED Published: 2021-12-13T15:47:48 Last Updated: 2024-08-04T02:20:34.148Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authentication in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A permissions validation flaw allowed group members with a developer role to elevate their privilege to a maintainer on projects they import Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/git
intainer on projects they import Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/336531 - https://hackerone.com/reports/1256017 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39944.json
CVE ID: CVE-2021-39945 State: PUBLISHED Published: 2021-12-13T15:47:49 Last Updated: 2024-08-04T02:20:34.109Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an author of a Merge Request to approve the Merge Request even after having their project access revoked Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/3316
oked Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/331675 - https://hackerone.com/reports/1198317 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39945.json
CVE ID: CVE-2021-39946 State: PUBLISHED Published: 2022-01-18T16:52:11 Last Updated: 2024-08-04T02:20:34.213Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/345657 - https://hackerone.com/reports/139
rogram Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/345657 - https://hackerone.com/reports/1398305 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39946.json
CVE ID: CVE-2021-39947 State: PUBLISHED Published: 2022-06-06T16:48:14 Last Updated: 2024-08-04T02:20:34.198Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Runner Problem Types: Information exposure in GitLab Runner Description: In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-runner/-/issues/28732 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39947.json
CVE ID: CVE-2021-39966 State: PUBLISHED Published: 2022-01-03T21:07:41 Last Updated: 2024-08-04T02:20:34.146Z Vendors: Huawei Products: EMUI, Magic UI, HarmonyOS Problem Types: Uninitialized AOD driver structure Description: There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2021/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39967 State: PUBLISHED Published: 2022-01-03T21:07:41.000Z Last Updated: 2025-05-22T18:48:08.694Z Vendors: Huawei Products: EMUI, Magic UI, HarmonyOS Problem Types: Improper broadcast permission settings Description: There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2021/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39968 State: PUBLISHED Published: 2022-01-03T21:07:19 Last Updated: 2024-08-04T02:20:34.130Z Vendors: Huawei Products: HarmonyOS Problem Types: Business Logic Errors Description: Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39969 State: PUBLISHED Published: 2022-01-03T21:07:42 Last Updated: 2024-08-04T02:20:34.329Z Vendors: Huawei Products: EMUI, Magic UI, HarmonyOS Problem Types: Unauthorized file access vulnerability Description: There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2021/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39970 State: PUBLISHED Published: 2022-01-03T21:07:20 Last Updated: 2024-08-04T02:20:34.138Z Vendors: Huawei Products: HarmonyOS Problem Types: Improper Input Validation Description: HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39971 State: PUBLISHED Published: 2022-01-03T21:07:21 Last Updated: 2024-08-04T02:20:34.136Z Vendors: Huawei Products: HarmonyOS Problem Types: External Control of System or Configuration Setting Description: Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could compromise confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39972 State: PUBLISHED Published: 2022-01-03T21:07:22 Last Updated: 2024-08-04T02:20:34.149Z Vendors: Huawei Products: HarmonyOS Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39973 State: PUBLISHED Published: 2022-01-03T21:07:43 Last Updated: 2024-08-04T02:20:34.108Z Vendors: Huawei Products: EMUI, Magic UI, HarmonyOS Problem Types: Null pointer dereference Description: There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2021/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39974 State: PUBLISHED Published: 2022-01-03T21:07:44 Last Updated: 2024-08-04T02:20:34.242Z Vendors: Huawei Products: EMUI, Magic UI, HarmonyOS Problem Types: Out-of-bounds read Description: There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2021/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39975 State: PUBLISHED Published: 2022-01-03T21:07:22 Last Updated: 2024-08-04T02:20:34.165Z Vendors: Huawei Products: HarmonyOS Problem Types: Data Processing Errors Description: Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39976 State: PUBLISHED Published: 2021-11-23T14:53:41 Last Updated: 2024-08-04T02:20:34.332Z Vendors: n/a Products: CloudEngine 5800 Problem Types: Privilege Escalation Description: There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211103-01-privilege-en
CVE ID: CVE-2021-39977 State: PUBLISHED Published: 2022-01-03T21:07:34.000Z Last Updated: 2025-05-22T18:41:29.173Z Vendors: Huawei Products: HarmonyOS Problem Types: NULL Pointer Dereference Description: The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39978 State: PUBLISHED Published: 2022-01-03T21:07:23 Last Updated: 2024-08-04T02:20:34.172Z Vendors: Huawei Products: HarmonyOS Problem Types: SQL Injection Description: Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39979 State: PUBLISHED Published: 2022-01-03T21:07:24 Last Updated: 2024-08-04T02:20:34.131Z Vendors: Huawei Products: HarmonyOS Problem Types: Code Injection Description: HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39980 State: PUBLISHED Published: 2022-01-03T21:07:25 Last Updated: 2024-08-04T02:20:34.203Z Vendors: Huawei Products: HarmonyOS Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39981 State: PUBLISHED Published: 2022-01-03T21:07:25 Last Updated: 2024-08-04T02:20:34.371Z Vendors: Huawei Products: HarmonyOS Problem Types: Security Features Description: Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39982 State: PUBLISHED Published: 2022-01-03T21:07:26 Last Updated: 2024-08-04T02:20:34.289Z Vendors: Huawei Products: HarmonyOS Problem Types: Improper Privilege Management Description: Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526
CVE ID: CVE-2021-39983 State: PUBLISHED Published: 2022-01-03T21:07:34.000Z Last Updated: 2025-05-22T18:43:06.356Z Vendors: Huawei Products: HarmonyOS Problem Types: Data Processing Errors Description: The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39984 State: PUBLISHED Published: 2022-01-03T21:07:35.000Z Last Updated: 2025-05-22T18:43:41.519Z Vendors: Huawei Products: HarmonyOS Problem Types: Out-of-bounds Read Description: Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39985 State: PUBLISHED Published: 2022-01-03T21:07:36.000Z Last Updated: 2025-05-22T18:44:14.030Z Vendors: Huawei Products: HarmonyOS Problem Types: Improper Validation of Array Index Description: The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39986 State: PUBLISHED Published: 2022-02-09T22:03:49 Last Updated: 2024-08-04T02:20:34.169Z Vendors: Huawei Products: EMUI Problem Types: Unauthorized rewriting vulnerability Description: There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/2/
CVE ID: CVE-2021-39987 State: PUBLISHED Published: 2022-01-03T21:07:37.000Z Last Updated: 2025-05-22T18:44:57.368Z Vendors: Huawei Products: HarmonyOS Problem Types: Data Processing Errors Description: The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39988 State: PUBLISHED Published: 2022-01-03T21:07:38.000Z Last Updated: 2025-05-22T18:45:27.290Z Vendors: Huawei Products: HarmonyOS Problem Types: NULL Pointer Dereference Description: The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39989 State: PUBLISHED Published: 2022-01-03T21:07:38.000Z Last Updated: 2025-05-22T18:46:14.388Z Vendors: Huawei Products: HarmonyOS Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39990 State: PUBLISHED Published: 2022-01-03T21:07:39.000Z Last Updated: 2025-05-22T18:46:43.868Z Vendors: Huawei Products: HarmonyOS Problem Types: Stack-based Buffer Overflow Description: The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202111-0000001217889667
CVE ID: CVE-2021-39991 State: PUBLISHED Published: 2022-02-09T22:03:48 Last Updated: 2024-08-04T02:20:34.221Z Vendors: Huawei Products: EMUI Problem Types: Unauthorized rewriting vulnerability Description: There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/2/
CVE ID: CVE-2021-39992 State: PUBLISHED Published: 2022-02-09T22:03:53 Last Updated: 2024-08-04T02:20:34.355Z Vendors: Huawei Products: EMUI Problem Types: Improper security permission configuration vulnerability Description: There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/2/
CVE ID: CVE-2021-39993 State: PUBLISHED Published: 2022-01-07T22:39:48 Last Updated: 2024-08-04T02:20:34.134Z Vendors: n/a Products: EMUI;Magic UI Problem Types: Integer overflow Description: There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2021/12/
CVE ID: CVE-2021-39994 State: PUBLISHED Published: 2022-02-09T22:03:54 Last Updated: 2024-08-04T02:20:34.354Z Vendors: Huawei Products: EMUI Problem Types: Aarbitrary address access vulnerability Description: There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/2/
CVE ID: CVE-2021-39995 State: PUBLISHED Published: 2021-11-29T15:34:09 Last Updated: 2024-08-04T02:20:34.155Z Vendors: n/a Products: eCNS280_TD;eSE620X vESS Problem Types: Possible Out-Of-Bounds Read Description: Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211124-03-dos-en
CVE ID: CVE-2021-39996 State: PUBLISHED Published: 2022-01-07T22:39:49 Last Updated: 2024-08-04T02:20:34.172Z Vendors: n/a Products: EMUI;Magic UI;HarmonyOS Problem Types: Heap-based buffer overflow Description: There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-0000001183296718 - https://consumer.huawei.com/en/support/bulletin/2021/12/