Information disclosure

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

Out-of-bounds

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

Path traversal

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure...

Buffer overflow

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 and versions earlier than 10.1.0.160C01E160R2P8 have a buffer overflow vulnerability. An attacker induces users to install malicious applications and sends specially constructed packets to affected devices after obtaining the root...

CVE-2020-9106

CVE-2020-9106 affects Huawei P30 Pro devices running versions earlier than 10.1.0.160 (C00E160R2P8). The vulnerability is a path traversal due to insufficient validation of certain pathnames, which could allow an attacker to access files and cause information disclosure. Connected sources confirm...

CVE-2020-9106

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure...

CVE-2020-9123

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 and versions earlier than 10.1.0.160C01E160R2P8 have a buffer overflow vulnerability. An attacker induces users to install malicious applications and sends specially constructed packets to affected devices after obtaining the root...

CVE-2020-9123

CVE-2020-9123 concerns a buffer overflow in some Huawei devices, notably Huawei P30 Pro. Affected versions include P30 Pro firmware earlier than 10.1.0.160 (C00E160R2P8) and earlier than 10.1.0.160 (C01E160R2P8). The vulnerability can be triggered when a user installs a malicious app and a crafte...

CVE-2020-9109

CVE-2020-9109 affects several Huawei smartphones (e.g., Mate 20, Mate 20 X, P30 Pro, Laya-AL00EP, Tony-AL00B/TL00B) with an information-disclosure vulnerability caused by insufficient validation of the identity of a smart wearable device in specific scenarios. The attacker would need access to ce...

CVE-2020-9107

CVE-2020-9107 affects Huawei P30 Pro pre-10.1.0.160 (C00E160R2P8). An out-of-bounds read/write vulnerability arises from insufficient validation of a crafted, unauthenticated message, which may cause the affected process to reboot. Multiple sources corroborate this issue (NVD, Red Hat, CVE listin...

CVE-2020-9107

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-9108

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-9108

The CVE-2020-9108 issue affects Huawei P30 Pro devices running versions prior to 10.1.0.160 (C00E160R2P8). The vulnerability is an out-of-bounds read/write caused by insufficient validation of a crafted message parameter, which an unauthenticated attacker can send to affected products, potentiall...

CVE-2020-9107: Out-of-bounds Read

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-9106: Improper Limitation of a Pathname to a Restricted Directory

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure...

CVE-2020-9108: Out-of-bounds Read

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-9123: Out-of-bounds Write

HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 and versions earlier than 10.1.0.160C01E160R2P8 have a buffer overflow vulnerability. An attacker induces users to install malicious applications and sends specially constructed packets to affected devices after obtaining the root...

CVE-2020-9109: Improper Authentication

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

CVE-2020-9096

HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160C00E160R2P8 have an out of bound read vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause...

CVE-2020-9095

HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160C00E160R2P8 has an integer overflow vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause integer...