Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Mate 9 Pro Firmware · all components

TI-2017-12641 CVE-2017-17225 · GHSA-4vxw-ghfr-vr8m

Memory corruption in Huawei Mate 9 Pro

Priority LOW 39

The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer overflow vulnerability due to the lack of input validation.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00611 Published 2018-03-09 No fix listed CWE-119
TI-2017-11224 CVE-2017-15311 · GHSA-j9rv-r9r2-7hjg

Memory corruption in Huawei Mate 10

Priority LOW 39

The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL0…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00714 Published 2017-12-22 No fix listed CWE-119
TI-2017-12698 CVE-2017-17324 · GHSA-8v75-3r4m-5rpw

Integer overflow in Huawei Mate 9 Pro

Priority LOW 36

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00888 Published 2018-03-09 No fix listed CWE-190
TI-2017-12694 CVE-2017-17320 · GHSA-9w3x-5xrr-jfm6

Double free in Huawei Mate 9 Pro

Priority LOW 36

Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0099 Published 2018-03-20 No fix listed CWE-415
TI-2017-11229 CVE-2017-15316 · GHSA-r9g8-36p4-9ggj

Double free in Huawei Mate 9

Priority LOW 36

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0099 Published 2017-12-22 No fix listed CWE-415
Priority LOW 36

The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulne…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01067 Published 2017-11-22 No fix listed CWE-416
Priority LOW 29

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions ea…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00309 Published 2018-10-17 No fix listed CWE-787
Priority LOW 27

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability.

CVSS 3.0MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00315 Published 2018-05-10 No fix listed CWE-287
Priority LOW 26

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00548 Published 2018-07-31 No fix listed CWE-119
Priority LOW 26

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implement…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00645 Published 2018-03-05 No fix listed CWE-200
TI-2017-11260 CVE-2017-15347 · GHSA-hp8r-934f-8wjx

Use after free in Huawei Mate 9 Pro

Priority LOW 26

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0056 Published 2018-02-15 No fix listed CWE-416
Priority LOW 21

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8).

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00251 Published 2019-06-04 No fix listed CWE-307
Open these records in search →