Priority LOW 36
There is a buffer overflow vulnerability in several Huawei products.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00828 · Published 2020-12-07 · Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2) +23 CWE-120
Priority LOW 21
There is an information disclosure vulnerability in several smartphones.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.0022 · Published 2020-10-12 · Fixed in 10.1.0.160(C00E160R2P8), 10.1.0.160(C786E160R3P8) +2 CWE-287
Priority LOW 30
HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00233 · Published 2020-08-11 · Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8) +6
Priority LOW 11
HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones…
CVSS 3.1LOW 2.3· Local · High privileges · No interaction · EPSS 0.00225 · Published 2020-07-17 · Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.135(C00E135R2P8) +2 CWE-22
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
Priority LOW 21
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAW…
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00214 · Published 2020-02-17 · Fixed in 10.0.0.180(C185E6R3P3), 10.0.0.180(C432E6R1P7) +4
Priority HIGH 73
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.06052 · Published 2020-02-13 · No fix listed CWE-682
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
Priority LOW 29
There is a path traversal vulnerability on Huawei Share.
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00468 · Published 2019-07-10 · No fix listed CWE-22
Priority LOW 21
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones.
CVSS 3.0MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00223 · Published 2019-07-10 · No fix listed CWE-863