Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Huawei Component: Honor 20 Pro Firmware Clear all filters
TI-2020-07388 CVE-2020-9247 · GHSA-c423-vwh6-449m

Buffer overflow in Huawei HONOR 20 PRO

Priority LOW 36

There is a buffer overflow vulnerability in several Huawei products.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00828 Published 2020-12-07 Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2) +23 CWE-120
TI-2020-07376 CVE-2020-9235 · GHSA-46w2-3f5r-88m4

Improper input validation in HONOR 20 PRO;Honor View…

Priority LOW 24

Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00242 Published 2020-09-03 Fixed in 10.1.0.212(C00E210R5P1), 10.1.0.160(C00E160R2P11) +2 CWE-20
TI-2020-07385 CVE-2020-9244 · GHSA-jx8x-69j8-c7fj

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro…

Priority LOW 30

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00233 Published 2020-08-11 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8) +6
TI-2020-07287 CVE-2020-9074 · GHSA-cj2v-hvhw-frjw

Improper handling of exceptional conditions in HONOR 20 PRO

Priority LOW 25

Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00733 Published 2020-06-05 Fixed in 10.0.0.194(C432E9R5P1), 10.0.0.194(C636E3R3P1) +7 CWE-755
TI-2020-01746 CVE-2020-1808 · GHSA-qvqw-f2fv-45jw

Out-of-bounds read in Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI…

Priority LOW 32

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0054 Published 2020-05-15 Fixed in 10.0.0.187(C00E60R4P11), 10.0.0.176(C00E60R2P11) CWE-125
TI-2020-00067 CVE-2020-0069 · GHSA-xx48-fp29-wh9j

Out-of-bounds write in Android

Priority CRITICAL 93KEV

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01382 Published 2020-03-10 No fix listed CWE-787
TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

Priority MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310