CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

CVE-2020-9256 affects Huawei Mate 30 Pro and is caused by improper authorization where apps can misuse system services. Exploitation would require user interaction (malicious app installation) and could result in denial of audio service. Connected documents confirm the vulnerability's presence i...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9252

CVE-2020-9252 affects HUAWEI Mate 20 (pre-10.1.0.160), Mate 20 X (pre-10.1.0.135), Mate 20 RS (pre-10.1.0.160) and Honor Magic2 (pre-10.1.0.160). The issue is a path traversal vulnerability caused by insufficient validation of certain pathname handling from a process, enabling a crafted path to w...

Huawei Mate 30 Pro Improper Authorization Vulnerability

Huawei Mate 30 Pro is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 Pro 10.1.0.150 C00E136R5P3, which stems from the program's failure to properly restrict an application's use of system services. The vulnerability can be...

Command Execution Vulnerability in Media Mate

Media Mate is a media center similar to Plex. Media Mate has a command execution vulnerability that can be exploited by an attacker to execute a malicious exe file...

CVE-2020-1838

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-1838

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

Authentication flaw

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

Type confusion

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

Design/Logic Flaw

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

Race condition

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-1839

Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3) are affected by a race-condition vulnerability. A timing window allows a concurrent process to modify certain pointer members, enabling code execution after tricking a user into running a crafted app with elevated privi...