Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

43 records in P30 Firmware · all components

TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

Priority MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310
TI-2020-07404 CVE-2020-9263 · GHSA-xh3q-7hfg-v6rr

Use after free in HUAWEI Mate 30;HUAWEI P30

Priority LOW 36

HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00833 Published 2020-10-19 Fixed in 10.1.0.150(C00E136R5P3), 10.1.0.160(C00E160R2P11) CWE-416
TI-2020-07388 CVE-2020-9247 · GHSA-c423-vwh6-449m

Buffer overflow in Huawei HONOR 20 PRO

Priority LOW 36

There is a buffer overflow vulnerability in several Huawei products.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00828 Published 2020-12-07 Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2) +23 CWE-120
TI-2019-03717 CVE-2019-5288 · GHSA-7jff-fmg7-h8gv

Integer overflow in P30

Priority LOW 36

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00942 Published 2019-11-13 No fix listed CWE-190
TI-2019-03716 CVE-2019-5287 · GHSA-x4g6-j2wf-rmx9

Integer overflow in P30

Priority LOW 36

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00942 Published 2019-11-13 No fix listed CWE-190
TI-2019-03660 CVE-2019-5225 · GHSA-xxxq-m57r-j966

Buffer overflow in P30, Mate 20, P30 Pro

Priority LOW 36

P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00828 Published 2019-11-29 No fix listed CWE-120
TI-2020-01750 CVE-2020-1812 · GHSA-vf7f-rm6p-4f56

Improper authentication in HUAWEI P30

Priority LOW 35

HUAWEI P30 smartphones with versions earlier than 10.0.0.173(C00E73R1P11) have an improper authentication vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00566 Published 2020-02-18 Fixed in 10.0.0.173(C00E73R1P11) CWE-287
TI-2019-03663 CVE-2019-5228 · GHSA-46rj-wmc7-5p68

Race condition in P30, P30 Pro, Honor V20

Priority LOW 35

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), Versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12), Versions earlier than Princeton-AL…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00647 Published 2019-11-12 No fix listed CWE-362
TI-2021-05305 CVE-2021-22331 · GHSA-52g2-g3r2-x33c

Injection in HUAWEI P30

Priority LOW 34

There is a JavaScript injection vulnerability in certain Huawei smartphones.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00721 Published 2021-04-28 No fix listed CWE-74
TI-2019-03696 CVE-2019-5266 · GHSA-832g-5px4-fqqf

Improper input validation in Huawei Share function P30

Priority LOW 34

Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00856 Published 2019-12-23 No fix listed CWE-20
TI-2020-07289 CVE-2020-9076 · GHSA-c399-vcg7-52h3

Improper authentication in HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B

Priority LOW 31

HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulner…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00599 Published 2020-06-15 Fixed in 10.1.0.135(C00E135R2P11), 10.1.0.137(C00E137R2P11) CWE-287
TI-2021-05301 CVE-2021-22327 · GHSA-h5qw-wfpg-g2wr

Out-of-bounds write in HUAWEI P30

Priority LOW 30

There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00534 Published 2021-04-28 No fix listed CWE-787
TI-2020-07385 CVE-2020-9244 · GHSA-jx8x-69j8-c7fj

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro…

Priority LOW 30

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00233 Published 2020-08-11 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8) +6
TI-2020-01751 CVE-2020-1813 · GHSA-mqqw-5995-r7pj

Missing authentication in HUAWEI P30

Priority LOW 30

HUAWEI P30 smart phone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00236 Published 2020-06-15 Fixed in 10.1.0.135(C00E135R2P11) CWE-306
TI-2021-05304 CVE-2021-22330 · GHSA-2p45-cjpq-qrf9

Out-of-bounds write in HUAWEI P30

Priority LOW 29

There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00272 Published 2021-04-28 No fix listed CWE-787
TI-2020-07401 CVE-2020-9260 · GHSA-rcr8-2g3p-62g2

HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than…

Priority LOW 29

HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00342 Published 2020-07-10 Fixed in 10.1.0.123(C432E22R2P5), 10.1.0.160(C00E160R2P8)
TI-2020-07390 CVE-2020-9249 · GHSA-xcr6-53hx-vmwq

Memory leak in HUAWEI P30

Priority LOW 29

HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-07-31 Fixed in 10.1.0.160(C00E160R2P11) CWE-401
TI-2020-07294 CVE-2020-9081 · GHSA-hc6q-5pvq-h8ff

Improper authorization in HUAWEI Mate 20

Priority LOW 29

There is an improper authorization vulnerability in some Huawei smartphones.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00202 Published 2024-12-27 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C01E160R2P8) +4 CWE-285
TI-2019-03664 CVE-2019-5229 · GHSA-7332-327w-xhcp

Insufficient verification of data authenticity in P30

Priority LOW 27

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability.

CVSS 3.1MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00171 Published 2019-11-12 No fix listed CWE-345
Load more
Open these records in search →