ByteOS

Product

EMUI

Versions

Affected

11.0.0

Vendor

Product

Magic UI

Versions

Affected

4.0.0

Problem Types

Type	CWE ID	Description
text	N/A	Uninitialized variable vulnerability

Type: text

CWE ID: N/A

Description: Uninitialized variable vulnerability

References

Hyperlink	Resource
https://consumer.huawei.com/en/support/bulletin/2021/7/	x_refsource_MISC

Hyperlink: https://consumer.huawei.com/en/support/bulletin/2021/7/

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://consumer.huawei.com/en/support/bulletin/2021/7/	x_refsource_MISC x_transferred

Hyperlink: https://consumer.huawei.com/en/support/bulletin/2021/7/

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@huawei.com

Published At:28 Oct, 2021 | 13:15

Updated At:02 Nov, 2021 | 00:13

There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*

>>emui>>11.0.0

cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

>>magic_ui>>4.0.0

Weaknesses

CWE ID	Type	Source
CWE-909	Primary	nvd@nist.gov

CWE ID: CWE-909

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://consumer.huawei.com/en/support/bulletin/2021/7/	psirt@huawei.com	Vendor Advisory

Hyperlink: https://consumer.huawei.com/en/support/bulletin/2021/7/

Source: psirt@huawei.com

Resource:

Vendor Advisory

Similar CVEs

54Records found

CVE-2021-37058

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 28.21%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with.

Product-harmonyos HarmonyOS

CVE-2021-37048

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.48%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-39966

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.13% / 33.40%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 02:20

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

Product-magic_ui emui harmonyos Magic UI HarmonyOS EMUI

CWE ID-CWE-909

Missing Initialization of Resource

CVE-2020-9227

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.51%

7 Day CHG~0.00%

Published-17 Jul, 2020 | 22:30

Updated-04 Aug, 2024 | 10:19

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this vulnerability may cause device exceptions.