Every CVESearch/Get API key

CVE-2021-22306

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not...

4.6 Medium

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.

Attack profile

How easy it is to exploit

Attack vector
Physical
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.22%Down 0.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used4.6

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.

Record
CVE-2021-22306
CVSS 3.1
4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE ListNo score

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.

Record
CVE-2021-22306
Updated
2026-11-02
EUVDEUVD-2021-9452No score

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.

Record
EUVD-2021-9452
Updated
2026-11-03
GitHub AdvisoriesGHSA-p9p8-p6wp-9g6cNo score

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not...

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.

Record
GHSA-p9p8-p6wp-9g6c
Weakness
CWE-125
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-22306 is a medium vulnerability (CVSS 4.6) in Huawei Mate 30, published February 6, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. No source names a fixed version.

References

MoveEnter Open