Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Mate 9 Firmware · all components

TI-2017-11224 CVE-2017-15311 · GHSA-j9rv-r9r2-7hjg

Memory corruption in Huawei Mate 10

Priority LOW 39

The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL0…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00714 Published 2017-12-22 No fix listed CWE-119
TI-2017-11229 CVE-2017-15316 · GHSA-r9g8-36p4-9ggj

Double free in Huawei Mate 9

Priority LOW 36

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0099 Published 2017-12-22 No fix listed CWE-415
Priority LOW 36

The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulne…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01067 Published 2017-11-22 No fix listed CWE-416
TI-2017-01958 CVE-2017-2716 · GHSA-995v-v47h-mr2v

Memory corruption in Huawei Mate 9

Priority LOW 35

The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00743 Published 2017-11-22 No fix listed CWE-119
TI-2017-01948 CVE-2017-2706 · GHSA-hx9j-rfr3-8j4f

Path traversal in Huawei Mate 9

Priority LOW 33

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module.

CVSS 3.0HIGH 7.1 Local No auth User interaction EPSS 0.00866 Published 2017-11-22 No fix listed CWE-22
Priority LOW 30

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00276 Published 2017-11-22 No fix listed
Priority LOW 29

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions ea…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00309 Published 2018-10-17 No fix listed CWE-787
Priority LOW 27

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability.

CVSS 3.0MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00315 Published 2018-05-10 No fix listed CWE-287
Priority LOW 26

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00548 Published 2018-07-31 No fix listed CWE-119
TI-2018-05736 CVE-2018-7930 · GHSA-fx44-x6g3-42f2

Information disclosure in Huawei Mate 9

Priority LOW 26

The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C567) has an information leak vulnerability due to insufficient validation on data transfer requests.

CVSS 3.0MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00365 Published 2018-04-11 No fix listed CWE-200
Priority LOW 26

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implement…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00645 Published 2018-03-05 No fix listed CWE-200
TI-2017-05740 CVE-2017-8165 · GHSA-hm8r-cqhg-w4cp

Information disclosure in Huawei Mate 9

Priority LOW 26

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00645 Published 2018-03-05 No fix listed CWE-200
Priority LOW 21

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9).

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00234 Published 2019-12-13 Fixed in 9.0.0.167(C00E85R2P20T8), 9.0.0.159(C432E4R1P9T8) +21
Open these records in search →