There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartphone-en | vendor advisory |