Priority LOW 24
Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2020-09-11 · Fixed in 8.1.0.326(C01), 8.0.1.16(C00) +2 CWE-20
Priority LOW 21
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00214 · Published 2020-06-08 · Fixed in 9.0.0.181(C00E87R2P20T8), 9.0.0.201(C432E4R1P9) +46
Priority LOW 29
There is an information leakage vulnerability in some Huawei products.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00336 · Published 2020-05-21 · Fixed in 9.1.0.331(C675E9R1P3T8), 10.0.1.1(C675R1) +13
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
Priority CRITICAL 93KEV
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01382 · Published 2020-03-10 · No fix listed CWE-787
Priority CRITICAL 93KEV
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.72105 · Published 2019-10-11 · No fix listed CWE-416
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
THREATIST.IORead the docs