Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

8 records in Berkeley-l09 Firmware · all components

TI-2020-00067 CVE-2020-0069 · GHSA-xx48-fp29-wh9j

Out-of-bounds write in Android

Priority CRITICAL 93KEV

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01382 Published 2020-03-10 No fix listed CWE-787
TI-2019-01829 CVE-2019-2215 · GHSA-m7g6-9cwp-6jgm

Use after free in Android

Priority CRITICAL 93KEV

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.72105 Published 2019-10-11 No fix listed CWE-416
TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

Priority MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310
TI-2020-07380 CVE-2020-9239 · GHSA-f8jg-xpjx-j54w

Improper input validation in BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI…

Priority LOW 24

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00242 Published 2020-09-11 Fixed in 8.1.0.326(C01), 8.0.1.16(C00) +2 CWE-20
TI-2019-03732 CVE-2019-5303 · GHSA-r5q4-f6fm-933q

Improper input validation in Huawei ALP-AL00B

Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
TI-2019-03731 CVE-2019-5302 · GHSA-ch39-559f-wp4m

Improper input validation in Huawei Sydney-L21

Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
Open these records in search →