Priority LOW 24
Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2020-09-11 · Fixed in 8.1.0.326(C01), 8.0.1.16(C00) +2 CWE-20
Priority LOW 12
Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability.
CVSS 3.1LOW 2.4· Physical · No auth · No interaction · EPSS 0.00222 · Published 2020-05-15 · Fixed in 10.0.0.156(C00E156R1P4) CWE-287
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
Priority HIGH 73
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.06052 · Published 2020-02-13 · No fix listed CWE-682
Priority LOW 25
The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability.
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.00301 · Published 2019-11-29 · No fix listed
Priority LOW 25
There is an improper access control vulnerability in Huawei Share.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00526 · Published 2019-11-29 · No fix listed CWE-732
Priority LOW 25
P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E3…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00463 · Published 2019-11-12 · No fix listed CWE-20
Priority CRITICAL 93KEV
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.72105 · Published 2019-10-11 · No fix listed CWE-416
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
Priority LOW 21
There is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 (C00E81R1P21T8).
CVSS 3.0MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00235 · Published 2019-06-04 · No fix listed
Priority LOW 21
There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8).
CVSS 3.0MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00235 · Published 2019-06-04 · No fix listed
Priority LOW 28
There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00).
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2018-12-04 · No fix listed CWE-787
THREATIST.IORead the docs