Not rated
CVE-2021-22331 There is a JavaScript injection vulnerability in certain Huawei smartphones
Description
There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product versions include HUAWEI P30 versions earlier than 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C605E4R1P3), and 11.0.0.138(C636E4R3P3).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HUAWEI P30 | Versions not published |
References
- www.huawei.com www.huawei.com
Timeline
- Published
- Last modified
Other CVEs of HUAWEI P30
The 13 CVEs of HUAWEI P30 →
CVE-2021-22399
The Bluetooth function of some Huawei smartphones has a DoS vulnerability
Not rated
CVE-2021-22330
There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when…
Not rated
CVE-2021-22327
There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing
Not rated
CVE-2020-9203
There is a resource management errors vulnerability in Huawei P30
Not rated