Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

13 records in P20 Firmware · all components

TI-2019-01829 CVE-2019-2215 · GHSA-m7g6-9cwp-6jgm

Use after free in Android

Priority CRITICAL 93KEV

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.72105 Published 2019-10-11 No fix listed CWE-416
TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

Priority MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310
TI-2018-05764 CVE-2018-7987 · GHSA-9jhh-f5r5-cq57

Out-of-bounds write in Huawei P20

Priority LOW 28

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00).

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00731 Published 2018-12-04 No fix listed CWE-787
TI-2019-03665 CVE-2019-5230 · GHSA-wr92-wj4q-v7v4

Improper input validation in P20 Pro, P20, Mate RS

Priority LOW 25

P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E3…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00463 Published 2019-11-12 No fix listed CWE-20
TI-2019-03647 CVE-2019-5212 · GHSA-5mr2-62qq-29fg

Incorrect permission assignment in P20

Priority LOW 25

There is an improper access control vulnerability in Huawei Share.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00526 Published 2019-11-29 No fix listed CWE-732
TI-2020-07380 CVE-2020-9239 · GHSA-f8jg-xpjx-j54w

Improper input validation in BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI…

Priority LOW 24

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00242 Published 2020-09-11 Fixed in 8.1.0.326(C01), 8.0.1.16(C00) +2 CWE-20
TI-2019-03732 CVE-2019-5303 · GHSA-r5q4-f6fm-933q

Improper input validation in Huawei ALP-AL00B

Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
TI-2019-03731 CVE-2019-5302 · GHSA-ch39-559f-wp4m

Improper input validation in Huawei Sydney-L21

Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
TI-2020-07286 CVE-2020-9073 · GHSA-48xv-3rm6-fh3c

Improper authentication in P20

Priority LOW 12

Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00222 Published 2020-05-15 Fixed in 10.0.0.156(C00E156R1P4) CWE-287
Open these records in search →