Priority LOW 39
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL0…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00714 · Published 2017-12-22 · No fix listed CWE-119
Priority LOW 36
The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0099 · Published 2017-12-22 · No fix listed CWE-415
Priority LOW 36
The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulne…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01067 · Published 2017-11-22 · No fix listed CWE-416
Priority LOW 35
The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00743 · Published 2017-11-22 · No fix listed CWE-119
Priority LOW 33
Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module.
CVSS 3.0HIGH 7.1· Local · No auth · User interaction · EPSS 0.00866 · Published 2017-11-22 · No fix listed CWE-22
Priority LOW 31
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module.
CVSS 3.0HIGH 7.1· Local · No auth · User interaction · EPSS 0.00278 · Published 2017-11-22 · No fix listed CWE-494
Priority LOW 30
Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,…
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00276 · Published 2017-11-22 · No fix listed
Priority LOW 30
Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass.
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0029 · Published 2017-11-22 · No fix listed
Priority LOW 29
The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions ea…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00309 · Published 2018-10-17 · No fix listed CWE-787
Priority LOW 27
Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability.
CVSS 3.0MEDIUM 6.2· Physical · High privileges · No interaction · EPSS 0.00315 · Published 2018-05-10 · No fix listed CWE-287
Priority LOW 26
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00548 · Published 2018-07-31 · No fix listed CWE-119
Priority LOW 26
The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C567) has an information leak vulnerability due to insufficient validation on data transfer requests.
CVSS 3.0MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.00365 · Published 2018-04-11 · No fix listed CWE-200
Priority LOW 26
Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implement…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00645 · Published 2018-03-05 · No fix listed CWE-200
Priority LOW 26
Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00645 · Published 2018-03-05 · No fix listed CWE-200
Priority LOW 26
Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versio…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0055 · Published 2017-11-22 · No fix listed CWE-920
Priority LOW 21
There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9).
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00234 · Published 2019-12-13 · Fixed in 9.0.0.167(C00E85R2P20T8), 9.0.0.159(C432E4R1P9T8) +21
Priority LOW 16
Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability.
CVSS 3.0LOW 3.3· Local · No auth · User interaction · EPSS 0.00297 · Published 2017-11-22 · No fix listed CWE-345