CVE-2021-40027
10.01.2022, 14:10
The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.Enginsight
Vendor | Product | Version |
---|---|---|
huawei | harmonyos | 𝑥 < 2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-476 - NULL Pointer DereferenceA NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
References