Security Vulnerabilities - CVEs Published In October 2021
A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vulnerability to cause arbitrary code execution.
CVSS Score
7.8
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart.
CVSS Score
3.3
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-10-28