CVE-2019-5228

The CVE-2019-5228 entry describes a race condition in the detection module of Huawei P30, P30 Pro, and Honor V20 devices prior to specific firmware versions (ELLE-AL00B 9.1.0.193, VOGUE-AL00A 9.1.0.193, Princeton-AL10B 9.1.0.233). The vulnerability arises from the system not locking certain funct...

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Multiple Huawei bracelet product certification insufficient vulnerability

The Huawei Bracelet 2 and Honor Bracelet 3 are both smart bracelets from the Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Bracelet 2 Eris-B19/Eris-B29 prior to version 1.2.53 and the Honor Bracelet 3 NYX-B10HN prior to version 1.5.53, which stems from a program tha...

Huawei Honor 10 Lite, Honor 8A and Huawei Y6 Information Disclosure Vulnerability

The Huawei Honor 10 Lite, among others, is a smartphone from the Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Honor 10 Lite prior to version 9.1.0.217 C00E215R3P1, Honor 8A prior to version 9.1.0.205 C00E97R1P9, and Huawei Y6 prior to version 9.1.0.205...

Huawei Honor Play Cornell-AL00A has an unspecified vulnerability

The Huawei Honor Play Cornell-AL00A is a smartphone from Chinese company Huawei Huawei. A security vulnerability in previous versions of Huawei Honor Play Cornell-AL00A 9.1.0.321 C00E320R1P1T8, which stems from a logic judgment error, can be exploited by an attacker to modify the alarm clock...

Huawei Honor10 Lite and Huawei Y9 Denial of Service Vulnerability (CNVD-2019-44785)

Huawei Honor10 Lite and Huawei Y9 are both a smartphone from Chinese company Huawei Huawei. A denial-of-service vulnerability exists in Huawei Honor10 Lite Harry-AL00C before 9.1.0.217 C00E215R3P1 and Huawei Y9 Jackman-L23 before 9.1.0.220 C45E3R1P1T8, which can be exploited to cause a dead loop...

CVE-2019-5301

Huawei smart phones Honor V20 with the versions before 9.0.1.161C00E161R2P2 have an information leak vulnerability. An attacker may trick a user into installing a malicious application. Due to coding error during layer information processing, attackers can exploit this vulnerability to obtain som...

CVE-2019-5301

Huawei smart phones Honor V20 with the versions before 9.0.1.161C00E161R2P2 have an information leak vulnerability. An attacker may trick a user into installing a malicious application. Due to coding error during layer information processing, attackers can exploit this vulnerability to obtain som...

Information disclosure

Huawei smart phones Honor V20 with the versions before 9.0.1.161C00E161R2P2 have an information leak vulnerability. An attacker may trick a user into installing a malicious application. Due to coding error during layer information processing, attackers can exploit this vulnerability to obtain som...

CVE-2019-5301

Huawei smart phones Honor V20 with the versions before 9.0.1.161C00E161R2P2 have an information leak vulnerability. An attacker may trick a user into installing a malicious application. Due to coding error during layer information processing, attackers can exploit this vulnerability to obtain som...

CVE-2019-5301

Huawei CVE-2019-5301 affects Honor V20 devices running before 9.0.1.161 (C00E161R2P2). The issue is an information-leak due to a coding error in layer information processing, allowing an attacker who persuades a user to install a malicious app to obtain some layer information. Documented impact i...

Huawei Honor Magic 2 Information Disclosure Vulnerability

Huawei Honor Magic 2 is a smartphone from Chinese company Huawei Huawei. An information disclosure vulnerability exists in the secure keyboard feature in previous versions of the Huawei Honor Magic 2 Tony-AL00B 9.1.0.216C00E214R2P1, which stems from the program's failure to properly restrict syst...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

Design/Logic Flaw

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

CVE-2019-5220

CVE-2019-5220 describes a Factory Reset Protection (FRP) bypass on Huawei Mate 20 X, Mate 20 and Honor Magic 2. Affected versions are Mate 20 X prior to Ever-AL00B 9.0.0.200, Mate 20 prior to Hima-AL00B/Hima-TL00B 9.0.0.200, and Honor Magic 2 prior to Tony-AL00B/Tony-TL00B 9.0.0.182. Root cause: ...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

Huawei Mate 20 X, Mate 20 and Honor Magic 2 security bypass vulnerability

Huawei Mate 20, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Mate 20 X, Mate 20, and Honor Magic 2, which stems from the system's inadequate verification of permissions. An attacker can exploit the vulnerability to bypass FRP...

CVE-2019-5216

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156C00E156R2P14T8, Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156C00E156R1P20T8 and Honor Play smartphones versions earlier than Cornell-AL00A...

CVE-2019-5295

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125C00E125R2P14T8 have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This...