Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

15 records in P10 Plus Firmware · all components

TI-2017-01968 CVE-2017-2726 · GHSA-mx2h-r3gc-8hq9

Memory corruption in Huawei P10 Plus,P10

Priority LOW 39

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.01351 Published 2017-11-22 No fix listed CWE-119
TI-2017-01966 CVE-2017-2724 · GHSA-jcx6-9vqr-gv6h

Memory corruption in Huawei P10 Plus,P10

Priority LOW 39

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.01351 Published 2017-11-22 No fix listed CWE-119
TI-2017-01967 CVE-2017-2725 · GHSA-52q5-gfc4-x6fx

Memory corruption in Huawei P10 Plus,P10

Priority LOW 37

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01255 Published 2017-11-22 No fix listed CWE-119
TI-2017-05725 CVE-2017-8150 · GHSA-qhww-87f6-pq58

Memory corruption in Huawei P10, P10 Plus

Priority LOW 36

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memor…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00958 Published 2017-11-22 No fix listed CWE-119
TI-2017-05716 CVE-2017-8141 · GHSA-rf9x-3287-7x74

Double free in Huawei P10 Plus

Priority LOW 36

The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01015 Published 2017-11-22 No fix listed CWE-415
TI-2017-05789 CVE-2017-8214 · GHSA-v494-p7p8-9c4w

Improper authentication in Huawei Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2…

Priority LOW 27

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C0…

CVSS 3.0MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00265 Published 2017-11-22 No fix listed CWE-287
TI-2018-05769 CVE-2018-7992 · GHSA-2q54-4w4q-ghg2

Memory corruption in Huawei MediaPad M3; Mate 9 Pro; P10 Plus

Priority LOW 26

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00548 Published 2018-07-31 No fix listed CWE-119
TI-2017-05747 CVE-2017-8172 · GHSA-g8mq-wmf4-5mwp

Improper array index validation in Huawei P10 Plus,P10

Priority LOW 26

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00628 Published 2017-11-22 No fix listed CWE-129
TI-2017-05721 CVE-2017-8146 · GHSA-rgh4-jjhx-5jrr

Improper input validation in Huawei P10, P10 Plus

Priority LOW 26

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0054 Published 2017-11-22 No fix listed CWE-20
TI-2017-05720 CVE-2017-8145 · GHSA-3m3r-vcpm-3xvw

Improper input validation in Huawei P10, P10 Plus

Priority LOW 26

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0054 Published 2017-11-22 No fix listed CWE-20
TI-2017-05724 CVE-2017-8149 · GHSA-g6jw-2m24-vm7j

Memory corruption in Huawei P10, P10 Plus

Priority LOW 25

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds m…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00531 Published 2017-11-22 No fix listed CWE-119
TI-2020-01800 CVE-2020-1872 · GHSA-6q93-673p-9879

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier…

Priority LOW 21

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balanc…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00214 Published 2020-02-18 Fixed in 9.1.0.201(C01E75R1P12T8), 9.1.0.252(C185E2R1P9T8) +2
TI-2017-05746 CVE-2017-8171 · GHSA-w79h-25vh-6g7c

Exposure of resource to wrong sphere in Huawei Vicky-AL00A

Priority LOW 21

Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00232 Published 2017-11-22 No fix listed CWE-668
Open these records in search →