VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2021· Updated Aug 3, 2024

CVE-2021-22331

CVE-2021-22331

Description

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product versions include HUAWEI P30 versions earlier than 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C605E4R1P3), and 11.0.0.138(C636E4R3P3).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Huawei/P30llm-fuzzy
    Range: <10.1.0.165(C01E165R2P11) or <11.0.0.118(C635E2R1P3) or <11.0.0.120(C00E120R2P5) or <11.0.0.138(...)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.