Use after free in Taurus-AL00A
Priority LOW 15CWE-416Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash, compromising normal service.
Why it matters now
EPSS 0.00215 11th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Taurus-AL00A | 10.0.0.1(C00E1R1P1) | — | No fix listed | CNA |
- Taurus-AL00A Vendor— Affected 10.0.0.1(C00E1R1P1) Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-22304
- 2026-10-03 Alias added: GHSA-fpwv-gp97-jc85
References
More Huawei Taurus-al00a Firmware vulnerabilities
- TI-2021-05269 Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. CVSS 3.1HIGH 7.5
- TI-2021-05277 Out-of-bounds read in Taurus-AL00A CVSS 3.1HIGH 7.1
- TI-2020-07305 Use after free in Huawei Taurus-AL00A CVSS 3.1MEDIUM 5.5
- TI-2020-07300 Out-of-bounds read in Taurus-AL00A CVSS 3.1MEDIUM 5.5
- TI-2021-05278 Double free in Taurus-AL00A CVSS 3.1LOW 3.3
Sources
- CVE-2021-22304 · CVE Program
- CVE-2021-22304 · NVD
- FIRST EPSS
- GHSA-fpwv-gp97-jc85 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences