Description
Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds of array and possibly cause the device abnormal.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-arrayover-en
Scores
CVSS v3
5.5
EPSS
0.0008
EPSS Percentile
22.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (4)
huawei/vns-l21_firmware
vns-l21autc555b141
huawei/vns-l21_firmware
vns-l21c10b160
huawei/vns-l21_firmware
vns-l21c66b160
huawei/vns-l21_firmware
vns-l21c703b140
Published
Mar 20, 2018
Tracked Since
Feb 18, 2026