Vulnerabilities

TI-2019-14002 CVE-2019-19412 · GHSA-gvv5-wgp2-xf56

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability.

LOW 21

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00214 Published 2020-06-08 Fixed in 9.0.0.181(C00E87R2P20T8), 9.0.0.201(C432E4R1P9) +46

TI-2019-03732 CVE-2019-5303 · GHSA-r5q4-f6fm-933q

Improper input validation in Huawei ALP-AL00B

LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20

TI-2019-03731 CVE-2019-5302 · GHSA-ch39-559f-wp4m

Improper input validation in Huawei Sydney-L21

LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20

TI-2019-03669 CVE-2019-5235 · GHSA-5wgx-97x6-5q43

NULL pointer dereference in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B…

LOW 26

Some Huawei smart phones have a null pointer dereference vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00915 Published 2019-12-13 No fix listed CWE-476

TI-2019-01829 CVE-2019-2215 · GHSA-m7g6-9cwp-6jgm

Use after free in Android

CRITICAL 93KEV

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.72105 Published 2019-10-11 No fix listed CWE-416

TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310

TI-2018-05725 CVE-2018-7910 · GHSA-ppxp-5c57-gjq2

Improper authentication in Huawei ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C

LOW 30

Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authe…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00276 Published 2018-11-13 No fix listed CWE-287

TI-2018-05726 CVE-2018-7911 · GHSA-vf4f-ww7h-wr5w

Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00)…

LOW 21

Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8…

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00237 Published 2018-10-23 No fix listed

TI-2018-05719 CVE-2018-7901 · GHSA-3mh5-q9p2-6cqr

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than…

LOW 21

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability.

CVSS 3.0MEDIUM 4.4 Local No auth User interaction EPSS 0.0046 Published 2018-04-30 No fix listed

Vulnerabilities

Filters